Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/948f441d-cd73-3240-abb0-b200190befc4.roa
File: 948f441d-cd73-3240-abb0-b200190befc4.roa (raw, json)
Hash identifier: 9M/3eP74kiFRzmhWvqDVc2qBbPNd4lnucH6lE16o8Lo=
Subject key identifier: 6E:B9:5A:18:3F:9D:B1:37:3D:EF:AA:7D:DE:37:EF:64:18:16:F3:91
Certificate issuer: /CN=91d07432-fb87-439b-b14e-e063470edfd2
Certificate serial: 010D0C9F4328584827C545BCEFFCF242E6387340
Authority key identifier: FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/948f441d-cd73-3240-abb0-b200190befc4.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 72.18.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:45:bc:ef:fc:f2:42:e6:38:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d07432-fb87-439b-b14e-e063470edfd2
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=40c36c57-4a17-497a-9f5a-5bec9f3ca9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:34:b5:38:28:6b:8c:0b:60:eb:9b:60:8d:66:
d6:73:a7:2a:71:2b:21:d0:18:da:26:34:b6:f5:c2:
8d:be:af:60:66:d8:46:a3:5b:97:dd:5f:57:c8:ef:
5b:f2:c4:35:4c:78:5c:b5:6f:17:f8:3c:d5:7a:c7:
f9:4e:15:e0:eb:0f:27:85:1e:61:eb:87:f2:7d:c4:
8f:44:68:ca:90:d2:aa:3d:75:35:a7:70:76:ad:20:
11:40:7c:53:ca:83:c4:65:6e:a2:69:5c:30:09:13:
ab:d3:af:22:8a:33:e5:9c:c8:5a:c1:ee:70:63:f1:
4b:3c:7e:bd:a3:08:b0:8b:b7:c1:ae:a8:e8:ad:47:
59:0a:67:81:79:16:f9:f4:fc:e0:ae:e5:b0:f8:10:
44:34:52:15:67:26:99:73:fe:69:6e:58:55:d2:97:
be:98:96:e5:b8:00:2d:2a:0e:6d:bd:32:5b:d1:77:
ff:79:27:ea:c3:b8:fb:7e:9f:da:b4:3b:58:7b:4f:
2b:f9:67:6a:72:79:eb:32:8d:49:20:16:69:29:10:
aa:1a:74:36:02:5c:98:53:20:ea:b1:eb:35:f4:e4:
b8:22:4d:e7:02:ff:fc:a3:d6:dc:e3:de:ea:1f:3a:
d9:87:d9:60:29:e6:4d:67:18:e0:b6:d7:e8:bf:9c:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B9:5A:18:3F:9D:B1:37:3D:EF:AA:7D:DE:37:EF:64:18:16:F3:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/948f441d-cd73-3240-abb0-b200190befc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.crl
X509v3 Authority Key Identifier:
keyid:FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:7d:4a:c6:dc:aa:06:32:3c:be:36:cf:33:90:43:60:c1:32:
98:85:de:c1:63:c7:d3:3c:61:b0:ea:a0:5d:94:22:31:96:93:
60:17:70:71:3f:b8:5d:bd:1f:8d:f2:40:82:20:64:01:25:13:
f6:2b:23:d9:2c:e7:2c:7b:3e:04:c3:d3:93:76:02:f8:22:e1:
18:a8:aa:78:d1:45:38:62:4d:d1:a2:c9:af:66:be:a4:c7:37:
31:a8:7c:c5:4d:cc:c0:bb:b0:c9:58:cf:a9:cf:76:ab:ca:e7:
66:d7:b2:bc:a7:b4:e4:08:db:f8:23:a6:4c:35:86:35:84:a1:
be:17:99:fb:d9:f3:b9:7a:c3:72:7b:53:8d:35:58:c0:26:5f:
8f:ad:65:52:45:4d:2a:0a:4f:4e:18:a2:ae:6f:84:ab:d2:5d:
5d:57:dc:9c:80:bf:04:1b:d8:03:c1:4b:cb:fd:e4:d6:9a:96:
aa:c5:6b:7a:3d:e1:b3:2a:db:b6:76:9e:e2:e7:d9:49:80:55:
54:c8:38:55:80:52:e1:09:01:8b:dc:b2:0d:86:a8:33:e9:15:
66:66:2c:40:20:04:bf:99:01:93:18:1f:b9:f6:57:92:c3:42:
bb:21:97:bd:1c:cd:09:71:bc:f6:73:77:cd:a1:3a:3a:15:16:
71:a1:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:20 2025 by rpki-client