Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4422852e-0841-37e0-b542-103ec6a2205c.roa
File: 4422852e-0841-37e0-b542-103ec6a2205c.roa (raw, json)
Hash identifier: NurecE6iLx7Aihfw/K82fW44CKXMHFD3F3wNVZf6wqQ=
Subject key identifier: 01:F9:2F:C2:F3:7F:44:A1:BD:5E:CA:EE:D4:AC:E8:0A:05:ED:9D:D4
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F432858487A2071227BC2E9E5B2E8E5C0
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4422852e-0841-37e0-b542-103ec6a2205c.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 9084
IP address blocks: 154.1.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:71:22:7b:c2:e9:e5:b2:e8:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=fc90c41d-61ce-4a2f-9e06-67c6af4c970d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:d2:97:b3:82:73:b3:83:1d:66:e0:aa:a3:
d5:6a:5f:97:aa:a1:45:0b:67:86:fa:d0:8e:77:6f:
07:44:52:5f:1a:43:9e:d8:94:ac:6d:b6:99:de:7d:
fc:57:a0:3c:44:58:59:b6:33:61:d5:57:97:c5:42:
73:7f:51:01:6d:d7:fe:69:03:ab:6e:d1:11:f5:20:
35:7a:99:5f:67:c4:9e:32:08:57:86:54:80:9c:e7:
09:bd:c7:34:54:9d:0e:e7:c6:4a:0d:7b:54:69:f7:
9f:71:15:53:84:0f:f3:89:5e:c6:9c:78:05:fa:b2:
8a:11:28:17:49:3b:7c:dd:40:2d:bc:77:d6:0b:03:
0b:39:50:c9:38:31:97:c2:27:35:1a:21:23:b8:11:
a1:65:94:72:48:46:4f:e6:ce:da:7a:10:5a:75:83:
24:5e:c8:12:32:41:66:7d:6a:62:ec:8c:c9:0a:d8:
7c:04:6d:2a:9f:fb:b3:8c:69:87:aa:af:db:dd:5a:
4a:8d:d8:2b:f6:3c:ce:7f:a0:f4:bd:7d:97:7e:68:
bd:51:5a:c8:59:d0:78:cd:6e:9d:5f:c9:f7:b3:d1:
2a:82:f5:d4:08:28:ce:81:4a:6d:b2:01:3b:9b:40:
65:5e:25:ff:14:31:20:b4:34:6a:10:5b:df:e9:06:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:2F:C2:F3:7F:44:A1:BD:5E:CA:EE:D4:AC:E8:0A:05:ED:9D:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4422852e-0841-37e0-b542-103ec6a2205c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
154.1.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:f8:a2:7a:df:15:f5:ba:98:a4:e7:30:8d:c7:bf:58:e9:7d:
6f:38:38:50:f0:3c:ec:02:71:bb:de:4f:0b:8d:bd:0f:c4:77:
ca:c3:6f:2c:d7:06:54:c5:21:3d:0f:42:b9:2e:89:3a:90:a5:
fd:aa:fb:e9:8a:6f:01:da:40:6c:61:57:40:35:ed:05:db:db:
80:6f:c8:62:65:5a:96:32:bd:6e:76:43:c8:3e:5e:23:cc:af:
e3:d1:f7:55:e0:4d:d7:a1:ac:7b:4c:35:42:53:b8:d8:c9:72:
5b:57:2e:69:2b:09:53:71:c1:1d:31:a9:62:06:85:59:9f:c1:
5a:d9:d8:ce:a9:51:64:cd:14:35:20:17:1b:86:3d:e8:19:38:
76:af:f8:f8:d1:ac:1a:89:44:92:5e:c5:3c:cd:0d:4b:8f:a6:
74:4b:ca:28:56:3c:25:4d:94:26:7a:fc:20:3e:dd:42:c0:f6:
2b:17:46:46:fc:23:4a:09:3b:14:42:9e:4a:66:9a:51:c1:f6:
c9:45:d3:5b:67:99:c5:fa:b1:32:01:96:e9:f3:43:89:fc:d2:
2c:e3:66:a2:d0:aa:22:4a:28:3c:2d:24:34:e3:f8:6c:65:36:
43:4b:54:90:dd:0b:9e:9e:99:b9:4a:f1:0b:0e:bf:05:e6:28:
22:df:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:18 2025 by rpki-client