Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfdd0aa0-c060-3e8b-adbb-7c3c343d2bd1.roa
File: cfdd0aa0-c060-3e8b-adbb-7c3c343d2bd1.roa (raw, json)
Hash identifier: BIctRbrXNSX1ujR4xerC6TabQV/2IlXjczBlAlJfkMA=
Subject key identifier: 27:5A:FF:D1:B0:4B:86:5D:5B:9D:C1:ED:4A:09:2E:3B:39:45:E2:93
Certificate issuer: /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial: 010D0C9F4328584827C54742AEF9020B0B8089F0
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfdd0aa0-c060-3e8b-adbb-7c3c343d2bd1.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 11659
IP address blocks: 169.147.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:47:42:ae:f9:02:0b:0b:80:89:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=2caac356-edfd-40c0-964d-711d03dbcaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:11:d5:ad:7b:c9:a0:f0:77:b4:f5:2c:1d:
c0:03:8f:70:d8:4e:e7:d4:ab:df:67:e0:08:0b:b3:
dd:43:71:98:27:5b:50:9b:d9:a1:b9:8c:f3:b5:34:
97:6c:48:29:17:ff:7d:27:a2:9d:44:67:0d:75:18:
49:62:da:9b:9a:f0:cf:69:00:45:ca:6d:62:65:2e:
b2:60:e1:ae:5a:36:b5:4b:f2:40:4e:ed:87:99:82:
a7:ae:7b:fd:a6:d0:14:e6:5a:fe:e2:5b:30:bf:1b:
45:a1:ab:20:4e:b8:bd:f7:72:3d:7b:b6:d0:ca:c4:
e1:43:e8:d5:db:9d:c7:a8:58:09:76:b6:37:c5:62:
bf:b7:ea:2c:b7:68:fb:86:d0:66:43:a4:71:fa:35:
af:be:c4:7e:21:29:aa:db:b6:5c:dd:e8:98:52:45:
d4:27:fc:cf:48:c9:c4:d8:5c:fd:97:67:31:47:65:
2a:e8:04:a5:62:7b:a8:15:c0:42:be:bd:6c:14:30:
2d:8f:69:6c:86:3b:cb:9e:cb:89:93:98:14:db:9e:
a7:fa:b2:5e:d2:5d:49:bb:04:26:a7:ca:e7:01:a9:
bc:7d:0e:77:8f:64:af:d7:d8:71:dd:7b:26:ef:e5:
b8:b7:32:d2:a4:bd:bc:ce:2c:e4:f2:6a:3e:dc:6b:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5A:FF:D1:B0:4B:86:5D:5B:9D:C1:ED:4A:09:2E:3B:39:45:E2:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfdd0aa0-c060-3e8b-adbb-7c3c343d2bd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
X509v3 Authority Key Identifier:
keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
sbgp-ipAddrBlock: critical
IPv4:
169.147.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:3f:60:22:ab:16:d9:19:ab:e2:82:ef:bb:1a:a0:4d:f8:54:
4d:0c:7d:a7:30:18:ae:fd:d6:89:68:72:b1:0f:ba:ae:e5:2a:
92:ed:9a:7d:54:33:50:f5:91:82:59:3b:c0:a0:a6:8e:a4:bb:
c5:05:4f:c8:6d:e0:d3:82:e8:32:7f:c5:ec:b1:5b:a6:18:59:
4c:53:98:89:99:98:e6:5e:b5:c9:3a:d1:52:03:2e:65:10:40:
be:be:e9:9c:c6:2e:f5:db:0c:dd:02:a9:33:2c:66:05:0f:8a:
5d:60:db:bd:63:37:8d:87:7a:9a:82:fb:a9:cf:41:2a:72:80:
99:ed:36:48:e0:8d:11:49:ec:99:b8:ce:f4:df:b9:83:d6:87:
c0:47:ea:47:f2:71:29:6e:f3:40:85:93:b5:a1:f9:a5:bc:1a:
78:c7:b6:98:92:c7:99:c2:8e:21:4a:a5:dd:e1:ca:db:82:e9:
49:2b:06:0a:82:1c:52:a0:79:de:f8:0d:ca:73:d8:54:04:a4:
c4:59:67:50:48:3e:0c:61:b0:51:2d:61:21:79:0b:4f:12:5c:
f9:9a:cf:13:97:e1:34:ee:08:73:68:a6:68:e5:ee:87:39:df:
66:86:9c:37:38:aa:b7:38:52:29:fc:2e:15:5a:a4:43:ef:89:
99:87:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:35:28 2025 by rpki-client