Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c91c5dd8-acbf-365f-a7b1-fcae52c30936.roa
File: c91c5dd8-acbf-365f-a7b1-fcae52c30936.roa (raw, json)
Hash identifier: 8b2HmexeNpNDzyCIC4oKSRG7t6QZ78eK85C9W+HYh3c=
Subject key identifier: A9:FF:A2:99:33:61:96:3B:6A:E0:3E:C5:2E:FB:11:F3:5B:27:AA:BE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11F6BB094D15A2E3BD1200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c91c5dd8-acbf-365f-a7b1-fcae52c30936.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 69.248.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:f6:bb:09:4d:15:a2:e3:bd:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2f980f12-e2e4-44a7-96c1-7413e55de07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:95:bf:3d:b8:a9:5c:4b:db:38:d1:0a:cc:
5e:f4:00:24:23:a3:69:52:ee:32:7e:77:8b:b9:83:
ca:b0:cb:9e:91:93:ec:85:bc:c4:00:b0:73:a3:37:
bb:44:b7:d7:db:e5:12:1b:12:69:6a:f5:7a:9a:9d:
bb:89:4e:9b:37:cf:b7:64:fa:a5:24:c7:6d:13:33:
7a:a3:e2:23:a1:fb:99:55:4c:a8:c8:16:b0:ea:0e:
7a:23:06:d2:84:bb:a3:72:76:5c:50:77:52:6e:f8:
b8:e3:2f:c6:5d:86:fa:e8:03:ea:2b:75:f8:80:96:
02:0a:57:f6:b3:9b:0b:ef:b0:b0:66:fc:24:0f:99:
3d:7f:be:88:b4:57:a0:77:32:ab:a4:0e:34:dd:7b:
94:25:21:28:ed:79:8f:a0:0c:72:0b:4f:5a:21:0b:
5c:4d:44:21:8f:64:07:0d:d5:f0:9e:50:5b:6c:e0:
81:d8:de:99:aa:34:85:9c:e8:e3:1c:f9:0b:d4:1b:
64:84:9b:43:44:29:9a:3e:66:36:25:c9:ea:d8:26:
3a:9e:f9:5a:d8:f5:03:a4:f5:ff:70:ba:9a:9b:63:
2a:9d:79:51:9a:ac:07:42:f5:9e:7b:bf:91:75:df:
93:53:e4:87:a4:0f:06:b1:24:a7:d4:21:92:8a:97:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:A2:99:33:61:96:3B:6A:E0:3E:C5:2E:FB:11:F3:5B:27:AA:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c91c5dd8-acbf-365f-a7b1-fcae52c30936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.248.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:cf:86:a5:76:ae:45:97:6d:07:47:79:9a:d3:6b:99:2a:29:
c1:72:b8:2b:95:c6:7f:c0:4d:8a:90:fa:27:11:77:0f:28:eb:
7c:2b:80:67:41:56:dc:8a:fc:7c:3a:bc:79:83:01:c4:91:fe:
3f:3c:38:0b:71:55:05:e4:17:23:35:94:39:7a:a0:0d:95:74:
f9:9a:31:9b:97:81:c9:ac:e9:09:21:95:2b:47:38:09:30:27:
00:d7:83:cf:ca:89:f4:12:9d:3a:c3:b2:a2:01:ec:29:8c:2a:
23:ea:cf:bd:59:60:46:6b:b3:19:9a:eb:74:c6:66:ef:1f:16:
fb:26:aa:c9:65:8a:73:e6:51:fb:b5:61:96:10:91:c9:d4:48:
f6:11:e5:6e:9c:bc:b5:d7:57:77:08:e6:27:01:12:ba:cd:cd:
88:b4:0b:85:84:da:dc:9d:66:ee:03:e4:85:31:ae:07:00:d2:
63:ff:df:09:9e:47:8a:9f:db:d6:44:c5:4e:3c:04:dd:92:71:
ea:7e:8f:c7:2e:bf:b3:c6:a6:a6:bc:4c:6d:15:04:68:46:c0:
da:f9:05:44:c5:d4:d1:76:12:04:20:50:11:86:7a:9a:13:a7:
bf:2e:63:73:05:70:86:07:b0:17:bb:95:23:bb:d4:ec:1a:c1:
6e:4c:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:05:29 2025 by rpki-client