Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/bbf789c9-4c12-3f30-896b-afbbef1c91c6.roa
File: bbf789c9-4c12-3f30-896b-afbbef1c91c6.roa (raw, json)
Hash identifier: KBcerMfXn6rQns4vZMeYuULuFNoQqit69PBWjhn7jh0=
Subject key identifier: BD:15:5A:2A:26:89:C5:B8:78:13:4F:83:64:CE:9E:97:58:16:8E:B3
Certificate issuer: /CN=4cd4075b-ef78-4472-b954-b5adf4a534e5
Certificate serial: 010D0C9F4328584824FA902809D8B8DBCE19DB40
Authority key identifier: D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/bbf789c9-4c12-3f30-896b-afbbef1c91c6.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 14618
IP address blocks: 199.91.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:90:28:09:d8:b8:db:ce:19:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd4075b-ef78-4472-b954-b5adf4a534e5
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=667b9b49-dfdb-4f24-8254-10090bdb711e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:60:11:99:72:40:8d:e4:2a:1e:3b:b5:22:
29:28:f5:1f:3f:c9:ea:be:59:b8:82:f3:9d:70:23:
40:c3:d8:e6:50:f8:04:72:24:21:ce:de:fa:a1:41:
d2:da:87:9f:4a:b7:16:ba:a5:1d:fa:df:e4:b2:bd:
06:a8:32:78:4f:38:4b:4e:45:75:f8:7f:0a:15:54:
9b:ec:6c:11:3f:04:fa:cc:f4:26:31:63:0e:59:38:
4e:8b:a7:a9:15:8c:a6:93:31:75:0b:c7:ef:b4:28:
d1:77:9e:fa:f4:e1:be:18:c1:47:77:e3:a5:43:04:
0b:29:7f:75:5a:b8:cf:e6:2e:03:4f:ff:97:c3:75:
ff:15:96:71:01:09:e3:56:cd:fd:92:64:26:43:35:
1c:73:71:3c:d3:6d:2b:ff:1a:14:80:fb:a1:76:05:
0f:8c:a4:f9:3c:04:69:76:2d:ff:0d:46:f9:18:18:
0f:e6:9c:f3:36:43:36:c3:99:8a:15:2b:0b:b6:93:
e4:10:64:7d:5a:a5:0d:08:1e:a5:ab:8a:69:b4:1a:
df:61:d1:45:ea:0a:dd:01:20:3a:26:24:d7:2f:af:
1c:8c:f7:47:dc:17:ec:2d:57:3a:1e:51:68:3a:b5:
74:ca:ec:85:ee:8e:2d:b8:6c:dd:bb:a6:0c:7b:e9:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:15:5A:2A:26:89:C5:B8:78:13:4F:83:64:CE:9E:97:58:16:8E:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/bbf789c9-4c12-3f30-896b-afbbef1c91c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.crl
X509v3 Authority Key Identifier:
keyid:D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:36:50:a6:63:7b:c7:90:7a:4c:6c:85:f3:f3:91:a7:4a:f7:
23:c8:cc:71:4d:2f:28:47:46:d4:d6:6b:a2:36:8b:10:2d:4c:
a6:76:85:e9:02:bd:76:45:7e:14:3c:b8:4b:d1:60:61:cd:54:
f3:33:de:07:ec:32:b7:52:4b:d1:d8:18:f7:ec:5d:b2:13:67:
14:a0:99:25:5e:05:0d:c8:b4:8e:10:8b:a3:58:bc:f5:d0:b9:
6e:64:22:99:27:a7:68:13:d7:1b:ea:a5:a2:e9:83:a0:60:04:
56:60:bb:52:f9:5f:dc:3d:3c:81:cd:b6:0f:76:a4:9a:6d:73:
7c:3f:43:14:81:6b:29:59:e7:7d:fd:eb:78:b5:78:70:bf:6f:
45:d1:ef:cf:58:65:5d:0a:72:5b:fa:36:c3:72:6a:3c:f8:22:
f4:62:0e:1f:5e:69:7b:c2:fd:f6:b7:81:ac:89:e2:0c:65:e0:
10:d3:cc:ac:19:44:20:14:45:33:f6:a8:b5:4c:b6:9b:17:bd:
d8:e6:a7:44:9d:d7:d1:e4:83:ae:65:d2:c4:8a:76:f2:92:d1:
8b:38:3e:dd:a5:32:79:d6:ff:17:e5:43:c1:18:57:6a:0c:50:
bc:5a:c2:07:ef:42:67:a1:65:05:dc:07:f5:fd:e2:85:d6:2d:
c6:25:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:27 2025 by rpki-client