Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa
File: aa9337db-fe12-3582-ada2-1a967639968e.roa (raw, json)
Hash identifier: yUxO5fbC+xoXUXElbj5zzkRld3/xn3eNFCCZW1xSJIY=
Subject key identifier: DC:64:61:C8:4E:0F:C2:2A:86:C6:99:AB:08:8D:31:4A:EB:0E:56:28
Certificate issuer: /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial: 010D0C9F43285848100A8B90EFE24C8EF6955BC0
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 14618
IP address blocks: 134.195.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:8b:90:ef:e2:4c:8e:f6:95:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=cd5deeba-8399-4864-a6fd-a8b5a2043c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:41:f6:55:b1:70:4f:f4:42:5a:c4:1f:cf:
a0:91:5f:76:ec:19:25:c0:aa:57:7c:17:ba:82:0c:
66:41:36:ea:df:96:c8:82:ea:96:19:1d:6b:4f:0d:
aa:ba:b2:54:8c:bd:f7:01:f4:10:7c:d8:d9:d2:ab:
ce:5d:fa:45:50:7b:1b:f2:6b:d5:55:f5:92:7b:a4:
e9:36:54:fc:66:5c:f7:eb:65:5f:a2:99:6c:0d:55:
d8:25:17:81:82:5f:aa:a8:a3:e2:2e:4e:71:cb:0d:
12:0f:d3:5f:f9:d7:a4:6d:7a:0b:6a:f9:ad:6a:71:
63:24:09:48:fb:69:3b:6d:d4:0d:d7:3a:20:a1:13:
9c:8c:f4:ba:09:41:e2:b8:e9:13:00:31:b8:f2:ab:
79:61:8b:d9:41:b1:17:aa:15:79:b2:04:4e:4e:ae:
1b:fd:92:2c:e6:47:4c:05:ce:2e:71:f7:af:71:0f:
32:44:88:fc:8a:73:e1:ae:2c:87:37:53:ba:1e:ca:
4b:ce:57:2d:9e:c1:cf:eb:85:e2:5d:83:e4:cf:55:
cd:d8:9b:3d:20:15:5c:51:94:e3:bf:8a:28:bd:56:
fe:89:91:59:d4:a9:4c:c4:a1:ad:3c:fb:11:fa:4d:
16:53:63:ab:dc:4c:bf:51:45:86:db:f8:e5:95:1e:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:64:61:C8:4E:0F:C2:2A:86:C6:99:AB:08:8D:31:4A:EB:0E:56:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
X509v3 Authority Key Identifier:
keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:81:19:d9:91:2b:00:31:b8:9d:7d:cf:8b:28:6b:6d:30:0b:
45:32:d4:9a:43:81:ce:f4:d4:bb:d9:46:ca:36:8a:3a:99:d9:
a9:49:2f:8e:5a:6b:ce:23:9a:d7:65:0b:29:ff:05:40:8b:c1:
47:57:ea:d5:1d:74:f5:bb:f7:6b:a0:dc:b6:41:49:46:94:d3:
da:dd:e0:23:0a:de:c3:66:54:6b:13:b5:63:3a:81:20:6c:fd:
40:79:e1:3f:b9:f9:22:05:00:84:0d:94:05:bc:e2:d4:9b:ea:
62:23:3e:ba:90:95:23:f0:e7:85:a5:a0:f9:09:63:93:e9:c0:
d2:82:2c:4f:cc:b4:86:c6:05:b2:98:ab:8a:47:51:93:45:dd:
41:d7:19:72:00:6d:c5:78:48:04:17:69:3c:0e:b6:cb:72:95:
93:48:17:63:6a:56:59:2e:b0:1b:e3:1f:a5:dd:ae:81:21:fd:
be:cd:13:4f:7b:76:23:20:c3:86:6b:cb:81:c9:8e:32:db:c3:
5e:25:06:ff:89:14:f4:97:ce:ef:33:ec:a0:ed:9f:1d:17:d4:
d4:d4:7c:e5:2e:1c:a4:96:57:7b:8f:87:b0:6f:70:f8:d3:70:
18:8a:8a:9d:ab:2c:b8:a2:20:4c:44:9f:9d:0a:2e:30:f2:ae:
74:bc:3a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:22 2025 by rpki-client