Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/9a7d4934-4ae9-3e1d-b395-1479eda32b31.roa
File: 9a7d4934-4ae9-3e1d-b395-1479eda32b31.roa (raw, json)
Hash identifier: 2+/hBAl72O4zPKTc4TfYrFR5um6HdN07h5w/675Z3gc=
Subject key identifier: FF:D8:F2:AA:9F:16:FE:FB:C0:36:3E:99:A8:EA:96:E7:B0:B2:D3:A1
Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial: 010D0C9F4328584827C543FC139B1A70C407A880
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/9a7d4934-4ae9-3e1d-b395-1479eda32b31.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 32133
IP address blocks: 169.197.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:43:fc:13:9b:1a:70:c4:07:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=1d825f11-b20d-4f32-9c16-2cf5a50690b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:70:e6:f9:9f:fd:00:7e:c7:48:16:e9:0f:
fd:1e:91:62:50:32:9e:ee:b3:6b:64:a2:a5:a2:fa:
8b:e5:f1:59:6b:85:7b:7b:ac:f8:10:6d:11:43:35:
92:38:85:34:32:5b:91:b8:b1:3d:1a:98:4e:c6:ea:
11:d7:61:fd:7a:d6:f4:b7:59:27:54:75:ec:c7:f0:
5c:69:bf:2b:a0:e7:d7:bc:c6:b5:03:a3:b0:14:b1:
a2:43:fa:7e:44:98:a5:ce:7b:21:19:b8:9c:45:37:
aa:50:78:54:57:42:8c:06:93:a9:8a:6b:0b:2f:6f:
f6:b3:c2:97:ce:81:c3:3f:1c:3b:f9:ed:43:10:5f:
83:7a:b7:f3:b6:65:9c:ab:d3:81:4e:63:f8:f8:0b:
61:69:38:39:8c:fb:b4:58:96:0a:8c:3b:ca:db:92:
55:1e:b2:e0:f9:68:4c:d6:5e:0e:33:07:f9:f1:53:
64:93:8d:51:71:e8:d0:11:9f:cb:22:df:2c:6f:b5:
59:9b:88:11:68:1d:b8:16:f5:2a:dd:41:b7:d1:ae:
8b:d7:e8:8e:bd:fc:6d:d4:7c:7d:4b:dd:90:94:dd:
b9:a6:52:37:53:bc:1e:64:7a:67:f7:03:85:ca:09:
a7:00:6c:21:96:52:64:a1:d5:68:d5:91:ba:bc:f4:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D8:F2:AA:9F:16:FE:FB:C0:36:3E:99:A8:EA:96:E7:B0:B2:D3:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/9a7d4934-4ae9-3e1d-b395-1479eda32b31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
X509v3 Authority Key Identifier:
keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
sbgp-ipAddrBlock: critical
IPv4:
169.197.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:21:53:31:81:97:8f:c6:f6:60:0e:9f:1d:11:4c:35:34:80:
cf:73:27:7d:97:64:18:0b:94:ae:c0:a4:4d:82:b2:34:52:bc:
b5:52:8d:6d:4d:a7:25:67:a9:ee:2a:9f:68:85:e2:a3:7a:09:
31:03:61:2e:d0:fb:1b:8e:08:83:5b:cf:e1:29:f9:0d:c8:c0:
11:c5:85:12:85:6c:a0:54:6a:e1:93:bb:7e:4e:f8:a4:38:aa:
2e:ca:03:13:69:01:ff:cc:95:c8:8e:f9:e7:41:bf:12:e1:dc:
f5:65:dd:db:24:da:2b:c3:ad:1b:0e:44:20:5d:cd:ae:8e:f7:
a1:42:be:92:9e:5d:91:c7:a1:c8:fc:15:4d:02:10:25:a4:26:
f1:8c:c6:8d:47:c7:fd:d8:f4:d7:cf:81:69:07:b0:5e:72:86:
1a:e5:77:21:00:e6:5f:96:d9:76:76:da:e4:b5:fb:40:d4:b1:
3a:77:d1:a2:14:1d:16:6b:a7:e5:80:c2:74:11:ec:5d:fd:81:
bb:32:6c:7a:8c:13:3c:2d:b0:8c:eb:f7:f9:96:a5:30:7a:b9:
9d:35:4a:46:15:cf:21:8c:83:7d:dc:c6:f8:f5:c0:bc:f0:a3:
64:79:07:f6:ab:9c:95:e2:a9:26:2a:d3:c6:a7:5c:da:7d:b4:
14:38:d9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:50 2025 by rpki-client