Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa
File: 5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa (raw, json)
Hash identifier: Fy/f+1xSjUy/+XgPi7nX/67f0Izhq7qfX2D7Q3MaLCM=
Subject key identifier: D4:F6:B4:74:FB:E9:2D:0E:15:A0:19:D5:E1:DB:D4:D1:78:B5:69:5B
Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial: 010D0C9F432858487755E63A0AFC1A4244DE9700
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 32133
IP address blocks: 169.197.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:e6:3a:0a:fc:1a:42:44:de:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=f582c865-b50e-4f69-a21b-0e7461473ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:0c:bc:f1:d3:2d:9b:6d:97:40:99:ab:e5:
63:08:3d:ed:3c:31:bd:71:e8:d5:2d:39:88:77:26:
20:95:aa:c2:fe:a9:09:e2:d4:be:69:f0:e0:bf:55:
08:ec:14:43:f9:f8:13:e4:97:d9:0f:49:ed:e4:5f:
d7:43:90:c6:88:0e:62:8e:09:90:5c:b1:a2:c8:85:
95:24:e4:ea:91:b3:99:77:b8:a5:70:f6:2e:a4:58:
cc:5b:60:56:b3:c5:f8:5d:73:bb:4c:45:66:4f:c2:
8d:f5:f8:51:cd:7c:66:31:93:47:08:29:13:9d:64:
a8:ae:d5:e7:67:6b:d6:a2:a2:d5:de:e4:4f:98:f5:
27:79:0e:2b:11:2c:95:d5:1b:40:fc:81:a2:33:af:
33:05:0f:03:ae:99:33:0c:52:87:f2:cc:05:f2:d0:
9d:76:de:c1:a5:61:ac:f5:9b:b8:78:31:f0:33:27:
86:f4:e1:b7:61:45:bd:e0:0b:ee:b9:13:5e:73:33:
90:1b:c5:6c:b5:69:f6:e0:05:5b:7f:80:b0:6e:e1:
7a:b9:de:47:3c:c4:f7:05:9b:1b:95:08:14:ae:b8:
3d:9e:8f:24:c8:98:89:80:06:13:e6:e0:ef:11:20:
14:ef:f0:b9:67:28:56:29:49:d8:53:a0:97:15:fa:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F6:B4:74:FB:E9:2D:0E:15:A0:19:D5:E1:DB:D4:D1:78:B5:69:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
X509v3 Authority Key Identifier:
keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
sbgp-ipAddrBlock: critical
IPv4:
169.197.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:da:9f:e7:5f:97:70:ae:aa:dc:31:97:64:65:33:1f:b3:e9:
c1:b1:8e:ca:8c:3f:b8:24:18:1d:67:3b:d5:ed:2f:ea:ef:6e:
6c:54:f9:b6:ff:02:3e:d5:f2:e1:30:2d:1c:b9:21:68:83:a1:
f6:4b:50:fb:78:58:94:7b:56:8d:ce:a9:a3:e2:20:1e:cc:44:
7e:41:1c:53:9a:b9:2f:f7:bd:6b:d4:6e:39:ec:00:f2:01:2d:
83:9d:ad:80:12:56:1a:70:58:1d:15:f1:6d:8c:2a:63:00:35:
60:ed:89:31:27:ee:22:93:c0:4c:ef:e8:47:02:7b:4f:6b:50:
ec:df:f7:b2:50:c9:d4:5b:ba:90:c7:e5:75:62:af:0e:51:5b:
40:8a:b0:89:29:14:13:1c:72:0b:41:b3:bd:db:16:cb:7e:3e:
ea:f8:38:14:15:a7:17:01:fd:b1:c2:95:ca:cd:94:70:14:0c:
80:1f:8e:63:b6:40:22:18:ac:0d:cc:50:c4:8c:e4:93:17:b5:
75:d2:f9:d8:99:68:a8:cf:73:6c:25:38:a1:36:53:76:11:d9:
8d:18:0d:b8:2c:04:7f:ca:aa:42:9d:be:0b:21:a2:bf:25:bb:
24:90:f1:6a:0f:1b:8b:e3:48:5a:86:3f:c6:50:cd:78:83:67:
1e:37:e6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:33 2025 by rpki-client