Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/95792c79-c7fb-3094-9b90-a293a903d5ab.roa
File: 95792c79-c7fb-3094-9b90-a293a903d5ab.roa (raw, json)
Hash identifier: SCKfT6V08ckYTCNhPzsKuJSb2vLXVEtuifPCJQAP+P8=
Subject key identifier: F9:2C:8B:97:79:DA:4D:F9:47:B5:60:47:01:56:E8:21:1A:3C:84:CD
Certificate issuer: /CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
Certificate serial: 010D0C9F43285848345560CF62030525BC1136C0
Authority key identifier: 1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/95792c79-c7fb-3094-9b90-a293a903d5ab.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 36032
IP address blocks: 168.161.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:60:cf:62:03:05:25:bc:11:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=fac69624-8d3c-4ead-8490-6096426911bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c5:8a:08:ea:fd:4f:8e:32:38:a6:53:20:30:
08:15:98:d8:ae:a4:5f:9a:59:b7:69:cd:cc:ea:75:
77:78:01:ad:91:05:0d:98:f3:26:9d:90:06:bc:58:
ee:9d:4e:52:bd:7a:61:95:27:d4:de:85:36:f3:6b:
5e:1d:34:82:10:e0:b5:2c:c2:53:f2:1b:ab:ab:46:
4c:c0:93:a5:ba:7b:05:23:b7:fe:5f:b6:b0:a8:41:
06:56:9a:7c:86:70:a4:32:97:09:89:e5:88:a8:41:
e9:af:75:e1:13:79:c3:4d:ce:c6:54:00:2b:78:c7:
9f:77:aa:36:39:74:94:e9:04:d1:1f:71:bc:17:47:
34:7c:9c:38:6d:8d:bb:fc:7c:b0:42:17:96:b0:64:
bc:81:14:56:fe:26:8d:b2:ed:dd:af:e8:d3:16:71:
73:38:be:eb:a1:3a:6e:ed:27:57:46:60:a1:0e:b7:
95:a9:e7:8b:ab:93:7f:1f:75:f0:81:69:f1:6b:89:
a8:13:e6:0f:96:30:9f:98:5b:1a:c6:cc:72:b7:98:
b2:13:86:59:ca:8a:d0:06:46:85:f5:06:bf:ed:db:
23:7a:79:b5:03:a1:0c:fe:b4:06:35:07:ba:e6:f6:
2b:94:1c:4f:39:a4:27:21:8e:4f:c0:01:17:e3:80:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2C:8B:97:79:DA:4D:F9:47:B5:60:47:01:56:E8:21:1A:3C:84:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/95792c79-c7fb-3094-9b90-a293a903d5ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.crl
X509v3 Authority Key Identifier:
keyid:1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer
sbgp-ipAddrBlock: critical
IPv4:
168.161.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:aa:fe:3f:f5:4d:f1:12:37:0f:62:74:6b:e3:53:47:56:ae:
5c:f3:00:bf:b0:45:ad:63:69:59:65:7e:73:ba:c4:78:11:d2:
3c:b2:37:f0:3e:2b:df:46:b4:89:65:3f:b4:5e:6a:ba:92:f9:
91:ba:e5:58:b9:c0:4c:d9:7c:34:fb:5c:dd:af:b3:55:76:be:
9d:3f:8e:fe:b3:f4:bb:58:b0:fe:23:de:de:3f:59:d6:eb:7e:
ae:be:5d:17:cf:3f:4d:79:ec:eb:3e:f1:7e:bf:1e:7b:0a:9f:
92:88:33:2f:ff:16:30:8f:cf:57:d7:4e:2c:2c:a2:b5:d9:c1:
4d:73:97:02:f2:82:73:f8:be:42:8f:06:06:ec:59:b2:e1:4d:
65:f3:24:63:90:4c:3e:74:f7:c7:b0:af:6b:85:e0:1b:f8:21:
e6:ec:eb:c5:0c:ab:b2:b0:ba:04:11:1d:06:7e:c1:e9:ba:f8:
8b:52:bd:3e:bc:cd:a4:fb:41:52:43:d6:7d:3e:41:b5:10:c3:
f4:0f:d3:53:2f:60:b4:71:dc:63:a2:8c:68:46:3d:f0:df:45:
e7:62:98:5d:ee:89:3b:42:46:b1:37:e6:08:27:c5:90:73:eb:
9a:d5:61:fd:8b:51:12:93:c6:31:b1:a9:6b:09:a7:1a:a7:dd:
86:31:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:42:02 2025 by rpki-client