Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/fad4678f-31ab-3e19-9ff7-ae8e486571fa.roa
File: fad4678f-31ab-3e19-9ff7-ae8e486571fa.roa (raw, json)
Hash identifier: DLBnOtMugmVIT0dKkCYrk+S0Hw0ifsh66r156HevCWs=
Subject key identifier: F0:2E:11:E4:A8:0C:41:61:4D:53:00:B9:8B:5C:73:34:8C:68:41:44
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F432858487B85BA46C6D5AD0BF363EAA0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/fad4678f-31ab-3e19-9ff7-ae8e486571fa.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 8075
IP address blocks: 192.94.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:ba:46:c6:d5:ad:0b:f3:63:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=2b94ff22-d075-4475-91b5-9cff0fa55f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:59:4f:de:73:74:6c:06:30:1f:3f:72:a5:
d9:36:c6:7c:47:3a:19:6f:3b:11:3c:52:64:4c:6f:
64:16:27:63:fe:74:dc:13:e9:8b:e4:0d:5b:50:9b:
64:8e:7b:32:27:a8:2e:fb:b0:ef:0f:c3:5b:2e:54:
b4:ee:48:e6:d8:1f:5f:f2:b5:53:36:84:99:c2:f2:
cb:96:b3:fd:c7:0f:1d:36:30:84:9d:4a:fc:7a:1e:
00:7e:51:30:d8:86:39:3e:24:82:f6:25:bc:f6:b3:
f7:00:67:06:48:a7:d6:21:9f:e2:49:81:b3:43:14:
ae:50:0a:eb:c1:9b:32:8e:87:d7:61:f4:9a:49:08:
ed:a6:7c:bf:14:4d:5f:00:b4:f8:71:4c:69:22:b2:
4a:77:4c:41:57:b1:fc:96:49:36:ac:be:d7:07:42:
80:1e:ed:b4:76:74:37:4d:6e:8a:4b:25:fb:3d:89:
e3:32:bd:b7:a5:b1:28:01:54:11:89:cd:c4:1a:bc:
07:d4:19:e4:55:33:48:0b:53:ff:b7:37:ce:38:17:
5a:d3:e3:fb:d6:39:18:74:4c:55:b0:2e:fd:86:a2:
10:54:04:8c:a1:9a:4e:66:49:da:c1:8a:cb:35:fa:
f1:43:eb:8a:9c:35:5a:a6:f5:ca:4e:95:d0:12:41:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2E:11:E4:A8:0C:41:61:4D:53:00:B9:8B:5C:73:34:8C:68:41:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/fad4678f-31ab-3e19-9ff7-ae8e486571fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.94.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:53:9f:b5:bf:cd:bb:37:ce:a3:88:98:17:63:d6:34:b5:06:
55:17:e1:4a:69:ef:ac:06:3e:6e:f9:0a:08:b2:73:08:55:73:
bd:0d:de:02:83:03:23:77:63:5e:67:01:af:db:3c:f4:de:e7:
8c:13:a1:16:ca:35:d4:32:fd:1e:b8:33:1a:4f:54:a1:2c:a9:
80:3e:7a:6b:7c:49:2f:55:fb:8d:36:61:66:d9:7f:64:69:8e:
ae:dd:01:34:ff:bc:a5:ec:39:5b:ac:47:7d:70:12:b9:a1:23:
e2:ea:58:61:07:5d:65:0d:87:7f:a9:78:97:35:10:ff:e9:32:
d2:b2:9b:57:3d:d8:02:c3:5f:d0:37:36:ff:ae:ba:8c:47:3a:
09:19:53:55:d6:4a:45:04:dc:ed:81:49:e5:b1:71:3e:b4:d3:
6b:14:09:62:c5:00:0c:e3:61:00:0f:56:5f:df:65:c4:b2:41:
fe:82:fa:25:a3:32:fe:5e:17:f7:35:a2:66:6c:2c:aa:ba:b2:
b7:8e:16:c3:b9:1a:4b:81:28:71:ee:4e:b8:07:8a:b8:7c:b9:
e4:93:49:66:57:2a:1b:74:14:dd:30:97:bc:96:c8:32:f4:13:
7f:7b:89:af:91:2f:cb:d2:06:5b:dc:3e:f4:ee:16:de:0c:5f:
24:87:1c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:49 2025 by rpki-client