Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa
File: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (raw, json)
Hash identifier: DBFMSxB73w+84pk4A00hczFb+gchF+0IkPdlEaRNYsg=
Subject key identifier: B8:83:D7:C7:99:00:7F:29:18:65:9B:3E:5A:84:38:4B:EB:9B:82:1E
Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b
Certificate serial: 010D0C9F432858480BDA743FCF4FE00328561200
Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 9009
IP address blocks: 162.254.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:74:3f:cf:4f:e0:03:28:56:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=02a273a5-4ba8-4405-9c73-f409046a3138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:56:84:a0:90:75:8c:a9:12:f4:9d:aa:10:
97:9e:d7:41:1e:5e:86:89:54:d8:b2:bb:be:4b:44:
85:32:4e:1c:de:a0:5c:0d:59:be:a0:4a:5d:c2:cd:
4e:5b:15:0f:cb:6e:3e:ce:29:07:ec:38:92:2f:2d:
f6:a1:a8:19:bd:7f:3c:28:9c:15:b1:bd:ee:85:b4:
e1:a2:f2:36:0f:ae:f1:23:51:d9:8d:c7:a1:6e:ff:
be:91:8a:23:c9:8a:4f:f1:2e:c5:04:38:da:b7:4c:
d9:b2:c2:4f:7c:8f:72:4c:81:c1:0d:25:47:aa:f7:
e3:b0:6a:b0:e5:c1:4e:17:a3:c6:54:a8:d7:c6:3f:
73:18:24:e9:ec:d4:3d:4f:d0:00:e8:f8:f7:34:74:
14:ae:39:1d:ac:7d:c6:74:05:25:4b:9d:48:c7:5c:
44:89:c7:25:c8:45:ef:dd:3e:a7:63:6e:69:f0:cf:
39:e9:5b:2b:a9:60:b9:de:b7:47:27:1a:7f:4e:7c:
33:84:9f:a6:6d:57:8a:f5:98:1c:0e:ec:9f:a2:f5:
7b:11:88:d9:16:ab:b6:d4:86:ce:22:b4:76:fc:0c:
ff:36:a9:a7:d0:e4:d6:b8:78:ad:37:ba:31:1d:58:
5d:02:d6:fb:2b:bc:b2:f0:49:0c:4b:23:9c:33:ed:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:83:D7:C7:99:00:7F:29:18:65:9B:3E:5A:84:38:4B:EB:9B:82:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl
X509v3 Authority Key Identifier:
keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:b5:64:62:46:53:e0:c8:f5:9f:44:19:ec:6e:04:6c:0e:3d:
b0:29:e3:5e:35:06:69:a3:86:80:fb:d3:8b:d1:07:19:f7:08:
68:6b:28:34:d3:81:dc:fc:73:e3:5a:ed:51:ed:ab:01:c3:0e:
c7:b2:e6:72:e2:d3:70:df:34:66:39:86:b8:47:9c:b7:77:b9:
f9:67:65:c7:41:c6:d4:21:e2:01:c2:95:cd:3c:35:8e:bf:ab:
70:92:93:7a:bd:2f:29:41:ed:25:33:f1:56:52:3f:e5:83:48:
7d:6f:5b:0c:f0:ba:ed:eb:ae:d1:bc:20:cf:ca:e6:28:31:9e:
fd:0d:af:1f:5f:19:67:2e:81:47:f8:eb:76:88:70:fe:e0:6b:
81:e3:17:74:dd:57:34:ad:0e:9a:dd:dc:fb:d8:c8:f9:96:9b:
61:e7:53:ee:89:2e:37:ad:78:32:c0:8a:b8:99:04:d6:4b:2b:
37:60:76:44:e3:4c:e0:73:29:42:ec:c4:cb:d4:19:98:1a:8a:
5c:05:bb:01:25:ad:62:35:48:c0:72:b1:18:60:9d:cc:4c:6f:
3e:e5:ee:e3:c3:39:5d:9f:96:86:77:41:74:9e:9d:da:ec:7e:
4e:12:1d:cd:0a:27:f6:78:c9:9d:7d:1f:10:20:8c:0e:e4:12:
c8:be:cc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:21:49 2025 by rpki-client