Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
File: 894b6866-3a19-3c26-9b99-d25c3c417e70.roa (raw, json)
Hash identifier: oJ/kPQqobdqT1UgqLBugBl1WhqsNbqEs04ikeflBnlk=
Subject key identifier: 93:5B:DF:8F:EC:77:C3:C7:12:7A:32:8D:7C:B9:5A:01:C4:30:64:14
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865303C29F9721F84AB84C4F3
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 24.149.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3c:29:f9:72:1f:84:ab:84:c4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=5fc521ac-8e4d-4562-a856-bc7abd6ed2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:2a:c7:8c:c4:80:29:9e:f8:86:bf:d2:6f:
4a:53:f6:74:76:db:a3:4b:3b:56:43:e5:d8:9c:6c:
0f:95:3b:12:77:0e:b8:17:99:f1:29:d0:93:e6:ce:
00:ee:b2:c8:a0:a1:2b:a6:74:32:88:94:ba:29:3f:
76:12:87:01:31:12:93:7f:07:2c:23:3a:07:dd:55:
c9:c6:67:10:94:a5:e7:51:e9:ed:06:2e:ba:3e:d0:
4a:8c:db:73:2a:3a:49:5e:24:1f:52:3d:23:d8:1b:
92:ad:25:71:94:c3:4e:a4:1a:26:27:ab:67:76:2d:
42:31:14:a8:9a:6e:af:e7:cc:ed:02:01:12:d8:80:
4f:59:78:ef:21:aa:9a:19:99:be:c3:fc:7b:c2:87:
3e:c5:f7:bc:d6:9c:ce:00:65:2b:6d:3b:46:83:10:
8f:bd:08:6e:88:1a:e4:72:06:ae:93:c1:94:b3:fd:
5a:45:be:27:09:74:7b:84:bf:13:c0:06:0a:47:36:
af:b2:88:20:a5:48:3e:4a:b3:4f:fe:1c:00:67:0a:
55:f9:5a:11:54:89:3a:6e:c7:60:60:ed:e5:00:d0:
b4:89:2f:82:27:92:46:f0:51:ee:b9:7e:14:e9:c9:
ef:ff:1e:50:10:cf:8a:2a:91:c4:19:81:1b:5a:d4:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:DF:8F:EC:77:C3:C7:12:7A:32:8D:7C:B9:5A:01:C4:30:64:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.149.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c9:6b:dd:cf:93:fa:50:f3:2b:37:51:ef:c5:19:92:a5:aa:
96:a0:46:3e:2c:1d:54:ab:62:02:86:8d:95:16:15:77:68:c3:
a4:1d:6f:e9:0e:26:f0:be:ba:30:66:63:8b:47:dd:fd:02:a5:
f4:f1:4d:63:91:a8:60:eb:2a:31:06:05:31:48:c7:63:14:79:
92:10:85:ed:b7:f0:55:56:2e:6b:db:5c:41:43:7d:36:0a:9e:
c4:0d:57:c3:22:1e:48:90:b2:cb:3a:c2:03:7c:72:d9:82:53:
ab:76:1d:33:31:ef:6b:3b:87:5a:89:af:d3:4f:2c:2c:b9:7f:
75:fa:41:68:51:e2:cc:38:b1:02:be:65:96:a5:c6:46:1b:59:
ac:41:f9:55:5c:0c:e1:05:e1:ec:da:81:e9:5e:5b:35:a8:e1:
8d:8d:a7:b1:08:85:52:32:56:5d:af:dc:6c:84:b5:8d:4b:b4:
75:dc:32:3c:5f:0c:72:6c:9a:84:7b:60:0d:b7:07:e0:60:c4:
1b:a6:40:b3:d6:fb:aa:c5:c6:aa:8a:9b:87:54:f5:dc:9d:8c:
41:71:79:f5:00:ba:1b:bd:9c:d5:57:4a:13:55:98:94:60:e5:
73:56:58:a5:a2:a7:32:b5:c2:ee:58:b3:75:34:ba:c1:78:eb:
25:5d:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:46 2025 by rpki-client