Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6254622d-16d0-381c-b049-425c1669ee2b.roa
File: 6254622d-16d0-381c-b049-425c1669ee2b.roa (raw, json)
Hash identifier: faX+N1IGtHbK5GFJ/ESgz6sqeUys8x6sWle4tCqIFV0=
Subject key identifier: 96:C1:D0:0D:3C:1B:93:97:9F:89:14:A0:21:4F:52:5B:AD:24:8F:1C
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858487DFC11F42297F2F480E7A7C0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6254622d-16d0-381c-b049-425c1669ee2b.roa
Signing time: Thu 09 Jan 2025 23:10:49 +0000
ROA not before: Thu 09 Jan 2025 23:10:49 +0000
ROA not after: Wed 09 Apr 2025 22:10:49 +0000
asID: 54233
IP address blocks: 208.94.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7d:fc:11:f4:22:97:f2:f4:80:e7:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 9 23:10:49 2025 GMT
Not After : Apr 9 22:10:49 2025 GMT
Subject: CN=7dc65ac0-020f-4461-9625-923d821afc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:85:42:91:fa:8b:6b:ed:08:20:36:f3:89:
03:39:e2:a7:84:ff:b5:29:9f:1d:be:b2:f6:d6:1f:
f6:0f:80:b0:5d:9d:bd:ef:ff:3e:04:5b:30:35:e0:
97:5f:a8:9a:7f:96:20:11:fc:ba:4b:66:62:16:13:
85:41:e5:cb:4d:c6:fa:9d:f5:89:2f:9a:60:eb:bc:
44:dd:01:86:c4:11:65:9e:d7:a1:6b:6d:06:9c:7d:
75:62:64:af:01:ff:09:8f:0f:ca:57:e2:94:18:3d:
e0:84:f2:80:5e:22:d6:91:28:be:86:9b:5e:e1:1e:
d6:a6:a7:77:fd:78:78:44:8f:32:4f:c7:be:e1:82:
cb:32:ce:89:4f:35:1f:71:d3:6a:3b:84:5e:4a:0c:
45:66:e0:ea:4e:0a:dd:a0:f8:c1:28:73:0c:7c:98:
94:d6:7e:94:51:f8:4d:48:83:b2:6f:b9:8f:69:62:
69:45:5e:93:28:8d:19:73:13:24:00:5b:1d:33:fd:
9a:0b:d0:ad:d1:ed:fc:ef:32:f8:dd:9d:13:38:71:
68:33:34:1c:8e:ad:16:b5:bb:10:68:99:43:78:02:
e1:05:bb:0e:4a:15:3e:f0:68:ed:6f:fc:af:23:e4:
8a:3f:c5:f7:b8:77:dc:2b:93:aa:a3:1e:ea:4c:c9:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C1:D0:0D:3C:1B:93:97:9F:89:14:A0:21:4F:52:5B:AD:24:8F:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6254622d-16d0-381c-b049-425c1669ee2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:df:b3:33:55:f3:50:4a:04:3a:e5:01:ed:1a:20:e8:ab:cb:
0f:ec:f6:cd:92:fa:dc:9f:13:a5:96:93:6d:b5:4c:99:d3:7d:
55:63:a8:c7:25:d6:df:4a:ed:a5:38:35:07:18:8f:08:af:ec:
63:70:6c:d8:ac:84:cf:8f:9e:0a:34:89:9a:cc:5a:bb:76:3f:
13:07:34:14:db:07:d3:00:e7:97:35:22:06:40:7b:d9:17:80:
5d:1e:bb:22:62:1d:1c:8d:b6:ea:41:46:38:bc:b7:da:e4:8f:
05:f8:77:b8:22:2a:6d:fe:1d:b8:b0:fe:3d:65:13:05:be:92:
3a:db:41:09:d2:49:eb:28:15:0f:b4:fc:5d:8b:81:10:7e:09:
bc:38:88:fc:87:e4:8a:00:f4:11:97:ef:69:43:25:69:6d:9c:
80:85:23:df:4a:a4:4b:8b:34:ee:a4:42:27:8e:41:15:12:33:
f5:ce:54:62:a2:7b:74:26:79:a9:1b:05:b1:83:09:aa:81:d3:
8c:6d:48:42:34:aa:27:55:d0:ed:be:3e:ab:c3:b8:ea:57:b2:
0b:cf:5f:1a:a3:a9:9b:30:ee:28:80:b1:f2:bf:88:b3:7b:90:
7f:ad:8d:6b:7c:dc:5c:47:58:2e:41:13:fc:67:54:8f:b4:c4:
4b:04:67:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:14 2025 by rpki-client