Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/9f6a7cb0-70c0-32da-89fc-c37ab73deeb3.roa
File: 9f6a7cb0-70c0-32da-89fc-c37ab73deeb3.roa (raw, json)
Hash identifier: jrXzh42V9XBWgpN4vjmDLeQvL+5L4ort1YEV1apnxek=
Subject key identifier: 78:D1:58:AE:9C:F8:0A:23:07:8C:0E:BB:2D:AC:38:34:84:D9:04:B0
Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial: 010D0C9F43285848345568123C15DAC0E0CEC2E0
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/9f6a7cb0-70c0-32da-89fc-c37ab73deeb3.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 40501
IP address blocks: 216.235.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:68:12:3c:15:da:c0:e0:ce:c2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=374a5060-e75a-4990-b304-d1ee2bf37b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:a2:44:ca:43:71:ef:c9:09:26:22:98:0e:
32:6d:51:4e:c1:00:8d:ce:f5:14:de:f2:c3:17:8d:
ef:24:db:33:e5:9d:e0:94:d7:be:38:5e:58:18:9a:
69:b8:ab:f3:d8:2c:74:39:d0:5e:9b:d7:7e:ef:d2:
c0:49:26:d3:d2:9b:4b:07:0c:bf:4a:91:ce:4b:08:
a1:28:40:7a:66:f4:c9:eb:a5:c9:9c:81:1b:e8:80:
e0:5e:23:49:3e:c3:d9:45:0a:55:f4:fe:38:d9:b9:
c2:8a:10:39:8b:98:9e:de:1c:00:30:0d:45:58:61:
e2:bf:e5:eb:e0:e2:05:f7:9b:d3:d5:0c:89:82:c8:
75:5d:e5:e9:14:98:d8:17:36:06:e5:c6:12:71:29:
29:ca:14:bb:6c:58:c0:d2:cf:bf:64:95:82:0c:2e:
14:e6:09:01:fc:6e:8d:8c:3a:a8:40:c6:50:3b:e5:
2e:38:9c:ab:73:c3:25:8d:27:29:d0:78:be:a0:52:
bb:a3:42:2c:0c:51:ef:d6:85:2a:eb:ef:cb:2b:fa:
84:31:2f:9d:a0:b2:91:9e:fa:a6:ab:61:72:0b:8b:
f7:07:df:48:63:95:a0:d2:0b:ca:71:ad:fe:79:b3:
2c:7b:a3:a7:71:4f:4e:3c:2b:c6:aa:28:45:20:e1:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:58:AE:9C:F8:0A:23:07:8C:0E:BB:2D:AC:38:34:84:D9:04:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/9f6a7cb0-70c0-32da-89fc-c37ab73deeb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
X509v3 Authority Key Identifier:
keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
sbgp-ipAddrBlock: critical
IPv4:
216.235.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:9e:88:e8:ac:f0:28:66:9c:9b:13:2c:54:8f:a6:43:02:a9:
71:4e:3a:6c:8d:71:33:58:a2:c8:d8:ee:d7:8d:54:5b:f8:41:
b7:32:5a:b9:5d:82:ef:a4:6a:a3:4d:5a:85:8e:10:6f:9e:6f:
d2:6e:16:90:dc:9a:94:59:5f:fa:5f:7e:3f:11:71:3e:4f:47:
00:48:53:79:35:bb:de:35:d2:51:b2:9b:3d:6b:4e:b5:81:e2:
71:f5:e8:99:43:59:5c:ad:88:5f:b3:80:89:22:78:a6:05:f3:
30:9a:db:91:e9:c8:10:b9:4f:e0:d6:68:e3:10:16:66:3e:f4:
e9:82:39:aa:5f:b7:7d:f9:84:7f:57:cf:85:94:ba:7b:a3:ec:
9c:a5:13:e4:a4:0f:f3:84:48:21:64:e5:f3:c2:84:7f:bc:98:
06:a3:1e:d4:8c:ba:be:6c:91:2d:c6:c4:b7:fc:22:74:6a:aa:
ef:f7:8e:6a:a2:7a:77:95:e1:98:b8:95:1d:b2:0a:95:cb:dd:
97:6c:fa:7f:0f:9f:7b:8f:dc:25:af:1c:98:d9:ea:00:fa:ad:
12:1b:51:e5:44:3d:5c:95:1d:b5:20:a5:69:c0:45:18:81:22:
bf:61:b8:38:5b:81:88:ca:2f:a7:72:8f:7d:07:ab:72:44:26:
a1:09:bb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:29:35 2025 by rpki-client