Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa
File: b08fdd2d-93d3-3967-9389-1c862db30c2b.roa (raw, json)
Hash identifier: wah65w0X76OAcMD5hgtilzwKEaL0YkMSmVBX3vhpKkk=
Subject key identifier: BA:5E:4B:89:8A:56:BB:21:60:FD:B7:7E:F9:BD:05:1F:79:10:89:AD
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285847FB1A2237126285FEE61F7080
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 397422
IP address blocks: 199.91.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:22:37:12:62:85:fe:e6:1f:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=90ec16cf-4559-4ee8-b037-1bf59c7b927e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:94:bf:c5:fa:d6:1f:20:06:9e:e7:ae:7c:
b0:8d:23:86:11:0b:19:d1:e2:1a:39:8c:f4:07:fc:
d5:39:c6:91:03:19:2f:2b:c4:8e:c3:aa:ea:a3:f6:
bf:bb:f8:69:24:86:fd:1e:8e:e6:64:92:df:b0:d4:
73:36:45:82:3f:59:ba:0f:d3:78:2e:90:39:7c:05:
fc:fe:ea:63:f1:af:00:fa:2c:0f:17:de:7b:aa:91:
02:61:fc:4d:5e:47:e0:58:0e:02:a0:66:de:44:c8:
41:eb:68:ee:21:33:ff:e0:97:12:f3:15:07:f3:7a:
21:59:ba:96:26:32:fd:74:40:93:98:8f:37:d6:88:
c7:93:49:57:fc:9c:ab:e0:1b:f2:cd:29:82:19:99:
2a:9c:90:e8:42:b0:02:2d:4c:d1:82:9f:76:a6:b2:
31:6d:ec:85:36:37:7d:34:ce:9c:b8:1a:3d:e2:21:
c7:e9:ac:63:94:64:cb:c9:dd:61:4c:b6:e7:e5:dc:
0f:91:85:40:34:4a:fb:9d:f2:e6:c0:d0:86:69:f3:
a1:8d:ea:d8:30:e7:06:9b:72:95:ae:9d:c7:87:fe:
19:58:29:1d:db:b4:e9:5c:33:a1:16:b7:2a:a2:58:
72:b4:b1:8a:33:f5:d3:f9:5f:81:09:2d:e8:3a:6b:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5E:4B:89:8A:56:BB:21:60:FD:B7:7E:F9:BD:05:1F:79:10:89:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:04:4a:30:be:a9:98:b7:39:35:7e:02:8f:b8:ad:2f:79:c8:
07:d1:c8:43:69:39:4c:15:3c:b1:4c:37:86:f0:95:c4:0a:8b:
ad:3f:94:f0:d1:6d:e8:f4:e8:2d:21:da:d5:f8:6c:2f:f6:95:
a3:9d:8e:d5:a7:bd:03:49:29:72:08:a3:8d:d1:ef:55:15:ce:
56:13:b9:7c:9f:87:6c:38:d9:b2:53:79:f1:2e:e4:80:3c:42:
57:2a:ea:d9:fd:e6:0a:88:d6:57:cc:3b:2a:d3:8a:b4:7e:ec:
9d:e9:71:24:8f:4c:a8:b3:4f:3d:5a:97:64:14:43:c6:8a:83:
9d:f7:7b:ea:bb:48:51:8e:a0:44:47:61:92:8e:b5:98:91:3c:
0d:66:6e:df:75:30:2f:57:49:03:7e:5a:6f:9e:77:cf:2b:b5:
1b:8b:c7:48:4b:77:62:e4:69:6f:99:bb:4a:f2:e3:f0:2a:60:
bd:e0:a7:63:3f:a3:74:59:fb:1d:3b:1b:2a:79:ed:ee:d5:34:
8b:ae:04:05:34:cf:86:f6:83:82:23:04:5a:ed:4b:3a:05:56:
74:af:b1:af:34:65:cd:56:ce:50:03:0c:c8:a3:e6:73:ff:98:
9a:8d:77:e4:5d:9e:36:b7:7e:cf:c9:44:b2:0b:b2:fb:90:d7:
3f:73:8f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:11:08 2025 by rpki-client