Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa
File: 7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa (raw, json)
Hash identifier: 8CA4WVp5T0WuC+z8J8hcz6Q+A3SeUI5UN9eL0LEw4G0=
Subject key identifier: C7:04:CA:61:E3:DA:85:86:41:C2:17:DB:42:96:07:E8:28:FD:BC:E0
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F432858480644FDE2D6BB0C95421492C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 14618
IP address blocks: 168.149.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fd:e2:d6:bb:0c:95:42:14:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=0b9d0541-0459-4789-83b9-26d1934207ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:ee:cc:1c:ac:92:f5:f6:7c:a2:09:a3:59:
c9:11:ee:fa:66:fe:79:20:a3:1e:a0:d1:96:12:03:
95:7f:6e:55:ea:8d:61:6c:9d:86:66:e1:28:39:e3:
20:74:84:05:df:d2:3d:c8:6c:b2:77:a9:54:9c:f0:
3f:b3:e7:61:2c:6a:5c:08:48:b6:e3:d1:13:51:62:
4b:05:d5:b2:72:ea:58:66:e0:28:3b:fb:fb:a0:fc:
b2:39:7e:73:83:76:32:43:e7:4d:a2:81:8a:d4:f9:
74:ce:e7:63:c4:33:32:f7:a8:05:9b:6e:e4:84:06:
b9:c7:57:ef:4a:d9:02:e0:e5:dd:a1:ab:12:21:41:
33:9d:28:cf:ce:97:a7:e7:5f:80:33:a7:a2:10:7d:
2f:f1:fa:cd:e4:4d:88:2f:ad:fe:9b:a7:61:87:6e:
f0:6d:cf:c9:03:cf:b3:a4:4e:58:35:c9:e2:f9:75:
48:33:4d:10:ef:c8:a9:95:60:75:14:f1:6b:24:a7:
8e:6c:e2:2b:23:0e:14:a6:b6:95:e3:1a:f6:b3:fb:
91:f9:27:75:a9:4e:53:c2:e2:ed:70:e9:34:00:88:
a8:a2:c4:82:fa:f9:92:18:1c:95:e5:a3:00:b5:c3:
ac:b1:7d:19:87:bc:5d:8a:52:20:82:e6:11:40:e3:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:04:CA:61:E3:DA:85:86:41:C2:17:DB:42:96:07:E8:28:FD:BC:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
168.149.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e3:b8:3e:35:65:8d:29:77:85:dd:b2:b1:84:f7:71:68:06:65:
9d:63:6f:a2:c8:ef:e1:7d:91:6d:34:00:a9:3e:75:10:7c:a1:
04:3b:73:c2:93:6c:d6:51:5d:b0:8a:5d:81:10:00:15:88:e5:
88:8b:a2:f6:0e:92:bf:0d:c8:99:17:77:72:e2:a9:ff:fa:32:
09:97:dc:bc:2a:68:de:93:de:bb:f7:14:51:40:dd:94:51:a1:
bb:56:ac:b0:5c:ae:53:ee:2a:50:b5:35:5e:8f:37:e5:e3:df:
f1:0c:ab:34:92:dc:fc:22:1e:ad:ae:fe:a3:e0:78:da:98:23:
ed:41:8a:37:66:d1:ce:24:ce:2c:89:5f:cb:2c:c4:1a:37:e6:
ea:1f:83:39:c9:ac:52:c2:ea:cc:9c:e4:b5:40:b9:9d:b2:03:
0e:08:cc:2e:16:b3:bc:a3:71:2d:6d:f6:b1:7c:69:6e:41:ec:
4b:3f:b0:61:14:15:cf:a1:42:eb:aa:07:20:81:68:43:d4:0d:
ae:1c:a8:98:3b:67:93:2e:0b:9d:cc:0f:60:fd:75:66:32:88:
d5:30:28:59:39:a5:18:d9:d1:ba:3e:9a:c9:de:fe:91:0c:ba:
5b:f4:bd:c1:64:de:96:2a:af:f7:08:68:3c:19:b8:79:27:e8:
3c:4e:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:00 2025 by rpki-client