Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa
File: e7afb843-f085-3588-909c-5f913275b459.roa (raw, json)
Hash identifier: UM4nAiD3k3ufswaRS1BV1TMzRQ7nNjdqUMOMrFkCbzA=
Subject key identifier: DB:EF:A5:D5:1E:59:0B:0E:8F:05:7B:7C:F9:B0:ED:B6:96:82:68:F8
Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial: 010D0C9F432858487E5065781D3F1C93A32AA640
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 53454
IP address blocks: 192.223.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:65:78:1d:3f:1c:93:a3:2a:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=6768440b-de81-42b8-a248-41ac7d36de7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:bc:76:75:94:74:44:42:11:27:22:6f:7e:
97:84:2f:88:06:b6:bc:e0:b1:23:98:77:47:55:78:
4e:48:0b:4e:f0:f9:50:8e:4a:e6:8f:7b:66:b2:e9:
be:58:5d:21:e0:aa:fe:90:1d:b5:09:21:3f:50:b1:
f4:cc:a0:a6:11:68:45:01:4d:c8:4e:9f:e0:bf:bd:
3b:fd:b2:a4:0c:81:27:9f:46:5a:8f:fe:b4:e2:4e:
35:45:6b:d5:2c:7b:a3:69:73:c7:e3:14:2a:de:d0:
85:62:26:10:34:fc:07:1f:76:0e:4a:91:fc:78:7e:
cf:55:c8:08:4c:b2:07:10:3d:c9:41:ba:44:6e:52:
1b:64:0c:4f:0b:39:7e:cd:c6:86:4a:2a:7e:9d:f0:
80:98:1c:df:a1:b3:e9:06:73:ab:e6:57:36:71:28:
e7:b1:75:b3:b5:93:c9:85:e9:ce:b7:0d:22:99:66:
6c:1d:a0:b4:dc:e2:9b:50:9c:7e:41:4e:0a:8d:b5:
bd:af:71:a6:e9:01:76:47:48:67:ef:70:17:83:07:
ba:77:d4:aa:c4:22:5c:83:71:c2:c6:2b:44:04:fb:
fa:09:a9:43:98:1e:18:1a:a8:99:a2:59:03:a4:f2:
63:42:d3:02:61:31:17:c0:a9:6a:38:fc:67:d8:c2:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EF:A5:D5:1E:59:0B:0E:8F:05:7B:7C:F9:B0:ED:B6:96:82:68:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
X509v3 Authority Key Identifier:
keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.223.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:9a:85:1a:9a:c9:93:68:55:9c:9b:23:c4:ad:5e:6f:6e:29:
6c:51:77:0c:d1:db:67:c6:1e:9c:99:43:73:1a:db:c2:ae:71:
dd:a4:86:12:be:47:02:7f:cb:83:aa:78:64:74:94:3c:a3:f3:
86:7b:22:c6:d6:05:23:c9:40:53:fb:68:3b:81:dc:d8:9f:62:
55:84:9b:2d:7b:55:c1:ea:32:f6:e6:02:3b:3c:64:15:f1:ab:
03:01:1f:99:3d:50:43:87:87:cf:5e:9b:e7:89:8f:0c:28:c0:
b4:24:b9:36:9b:75:1c:6d:ef:36:19:21:df:82:d7:e7:61:6f:
46:d2:a6:3d:4c:18:11:44:c7:b1:5b:6e:67:e3:94:81:2f:47:
90:13:c3:08:78:bf:4c:87:dd:ef:e7:50:6f:68:11:8d:70:e7:
e6:5f:b0:0b:37:4d:d1:39:04:19:4d:01:19:ba:2c:9d:b3:96:
ab:1c:17:f6:ea:19:ed:3d:6d:2e:0f:ad:34:71:93:d4:9c:fd:
7b:0c:8e:c1:b7:4f:75:06:88:dc:a1:71:f6:58:eb:f4:3a:53:
b0:69:17:e5:79:4e:66:9e:36:1a:65:91:dd:e7:df:39:ec:81:
1b:e2:bc:2c:fe:5d:f8:1b:47:43:a4:a6:67:5e:5e:16:06:2d:
d3:07:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:32 2025 by rpki-client