Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa
File: d98ff242-b4f1-3965-86dc-a85d09eab58c.roa (raw, json)
Hash identifier: kE+lILNJzb4FtwLFe8Zx5ATbCK2xpdYZ+e9Uju5gi5E=
Subject key identifier: AE:0A:8F:41:CE:C1:3C:E0:FC:9D:8F:2F:94:5F:96:E9:71:8A:33:3D
Certificate issuer: /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Certificate serial: 010D0C9F432858488815E434145B890CCACD2580
Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 15164
IP address blocks: 192.111.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e4:34:14:5b:89:0c:ca:cd:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=85dd68ee-5e8e-477a-ae06-52a292bec30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:1d:8f:80:59:54:1e:04:9b:21:11:e3:44:
df:64:bb:de:84:f2:6c:80:53:11:98:ba:d2:d4:f9:
38:ce:37:4a:49:fd:10:15:93:27:b5:a1:e8:93:f2:
c5:74:05:1f:4d:47:d9:0f:d8:2d:7f:32:73:02:6a:
ce:9e:55:c2:dd:c0:58:51:06:34:0c:49:a5:7e:dd:
10:09:0b:37:d7:29:e2:57:eb:51:ea:ea:8e:07:6a:
e7:ae:4f:4d:48:27:39:1c:34:27:32:1e:46:95:a4:
71:ff:03:28:1f:9d:a0:43:25:ff:39:7b:10:02:c7:
65:1e:f6:8b:18:75:04:c7:5b:87:fb:5d:e3:c3:58:
51:8d:16:b2:49:da:1d:30:96:86:15:b6:6a:79:7d:
08:5c:89:29:85:ac:94:5a:2a:1e:bc:c7:9c:09:5c:
f0:ff:f8:e8:f7:f2:e6:e6:14:be:91:4f:86:63:68:
5e:26:db:29:cd:c3:6e:28:e5:10:7c:74:84:21:12:
6b:39:b3:b0:a2:56:5e:e0:51:f2:d1:d2:b3:ba:f0:
6c:b9:08:02:43:94:e4:9f:2d:df:1f:ef:52:30:1e:
89:1a:be:2c:22:7a:2a:1d:7a:26:56:92:37:18:38:
55:80:92:f1:59:92:49:7b:35:26:08:a4:2c:bd:7a:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0A:8F:41:CE:C1:3C:E0:FC:9D:8F:2F:94:5F:96:E9:71:8A:33:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl
X509v3 Authority Key Identifier:
keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.111.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f8:5f:62:e0:a4:bb:a7:56:2c:28:b6:37:f5:bd:f6:7c:5c:
77:ad:f6:6a:ee:12:80:aa:1b:f3:7f:a4:67:1f:75:cf:b5:da:
a0:18:8c:00:69:b7:6e:cc:c0:3c:f9:52:4a:33:c4:79:9d:71:
41:94:51:8b:7a:2a:04:38:2a:57:e0:81:30:1c:0c:07:07:fe:
fa:2f:64:67:b5:1a:0a:0b:4e:6c:ea:4b:51:0f:b8:f2:f4:b6:
00:45:0e:c8:25:e5:73:1c:38:35:92:73:f1:b0:a2:75:c2:bc:
7e:c7:d6:e8:14:70:45:19:55:f8:0b:d0:6e:ac:5d:65:6e:d5:
46:59:38:18:82:19:fd:59:d1:b0:a0:49:83:d6:90:44:10:5c:
c8:11:ea:00:41:c3:0b:11:15:11:76:e7:8c:fe:79:0d:6e:95:
8c:66:91:ac:c8:23:70:3d:67:25:da:36:54:94:02:73:40:e0:
39:ca:b4:70:3e:34:ce:9b:59:ab:92:2c:76:2e:21:96:a0:4b:
63:64:28:d1:b1:91:f0:49:8b:2b:88:e0:c3:06:c8:32:23:97:
a1:e4:3c:15:06:d8:98:1a:26:c4:8c:89:f8:43:5e:3c:0f:0e:
ba:86:18:23:6d:64:7d:51:a7:40:cc:ab:b3:a9:35:1d:48:85:
3a:54:ad:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:55 2025 by rpki-client