Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6793821d-d94a-30ef-af8a-29ebda4241ad.roa
File: 6793821d-d94a-30ef-af8a-29ebda4241ad.roa (raw, json)
Hash identifier: gh8Sv883FBqHsSG6BwRBrSk25upLPWDEP649esE2j4w=
Subject key identifier: D4:2A:C0:B0:E9:EE:5C:28:D7:2A:A3:D8:DF:4D:F8:5C:66:36:47:0F
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F43285848451586B5A8CA1A5C59C4DF00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6793821d-d94a-30ef-af8a-29ebda4241ad.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14061
IP address blocks: 167.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:86:b5:a8:ca:1a:5c:59:c4:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=fa3d1a85-94c2-40c9-bb57-52991522f04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:d9:a6:73:6d:5a:4e:87:50:cb:0e:d4:1e:
af:56:70:53:a3:0d:c6:fb:9c:f9:9e:50:c6:16:68:
5d:9f:4d:df:47:08:00:05:fd:80:b8:e8:32:af:56:
35:cf:5a:1a:b7:bc:34:b8:6c:0d:9f:4c:94:6e:51:
13:6b:1e:0e:bc:2b:6f:99:50:88:11:4c:75:42:77:
2d:5a:70:8c:a7:b4:be:cf:e6:ff:03:5c:92:25:32:
d0:9d:0e:50:f8:c6:16:99:7f:a1:3d:bb:38:ee:a0:
3c:d3:4e:28:b2:7b:03:a1:eb:ac:91:4e:04:2c:67:
99:77:60:ee:03:0e:26:6d:b1:ae:1d:03:15:26:fb:
d5:5b:5a:55:8c:8f:54:73:a8:27:18:95:ad:f0:a8:
21:06:92:42:4f:a9:31:ef:ee:24:ea:b4:36:d2:70:
5d:6e:9f:67:27:42:e4:27:d6:e4:c1:b2:47:7a:4b:
97:0e:f2:cc:17:ba:a6:cf:44:14:57:f7:9d:71:f3:
a1:d0:1f:b9:97:bb:ad:63:a5:75:b2:db:3a:85:9b:
8f:f4:60:8a:de:57:ea:2c:8e:e1:31:1e:47:7c:d9:
65:bb:1d:fd:29:56:72:7c:ec:3a:3c:35:2c:1e:df:
ec:3a:f4:75:83:4e:78:f8:ae:93:b9:fe:44:55:c9:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:C0:B0:E9:EE:5C:28:D7:2A:A3:D8:DF:4D:F8:5C:66:36:47:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6793821d-d94a-30ef-af8a-29ebda4241ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
167.99.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:02:66:8d:09:6e:b2:10:45:dd:1b:10:45:01:02:1b:3e:25:
68:84:16:92:c4:d1:50:62:dd:a3:5f:da:ad:88:eb:4b:1b:43:
c1:1c:96:cb:e7:8b:37:8a:c5:4c:a1:19:3a:04:6a:8c:e8:83:
a6:af:ae:41:0e:c8:2e:a5:82:b8:e8:41:82:f1:b3:21:59:51:
af:5e:a9:57:cb:37:85:b8:e4:b9:3d:cf:72:c7:d9:69:29:0f:
74:3c:74:b1:b1:da:55:a1:f2:aa:97:fd:05:25:b9:ab:ef:d8:
3e:87:3f:fa:1e:e2:0c:ae:9a:37:96:7b:2a:e5:ff:0a:d6:eb:
b4:5a:9d:37:14:6e:3d:89:f5:ba:0e:55:dc:28:37:0b:12:b1:
4e:b7:b6:6e:63:71:c7:d9:61:c5:86:0f:23:a5:7e:c5:ab:74:
73:14:bb:99:a6:ac:22:bb:24:a4:c8:5a:38:10:a4:21:45:09:
86:dc:b4:64:e0:71:e7:d3:ba:d2:dd:80:5b:a1:1d:4a:c0:12:
58:41:08:e4:cb:e2:ff:cd:f2:c8:6d:e7:bd:6d:20:12:eb:43:
69:f8:66:38:e5:2d:6b:0f:ea:9d:3d:69:5d:05:25:c2:cf:84:
71:97:13:de:3c:3e:e6:55:95:ef:b8:ac:51:f0:76:af:03:29:
5c:12:5d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:28:03 2025 by rpki-client