Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa
File: 6624b998-13e0-3a4d-aac9-4037a34bff51.roa (raw, json)
Hash identifier: 2JVxu2YDCbNZZQxFD6My8spe8h4X930xz5xkEU9M1Q8=
Subject key identifier: 6C:B6:EC:48:32:AB:DC:89:57:04:98:DB:CE:28:35:A3:C4:9C:75:52
Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial: 010D0C9F4328584824FA843A697BF6403A5E8080
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 7127
IP address blocks: 192.214.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:84:3a:69:7b:f6:40:3a:5e:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=8dc65317-8516-464f-8742-8264e9092d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:2f:76:45:ed:1c:c1:f7:16:46:99:33:82:
63:11:e7:f5:db:75:5c:af:47:c0:74:72:00:c2:46:
51:1e:18:9f:b2:7f:42:c1:ad:2c:5f:9a:8b:52:28:
9e:0a:50:0d:90:8e:15:9c:c1:8c:22:15:70:1c:1a:
04:4c:4d:7d:eb:6a:32:f5:40:1d:60:6b:46:e1:7c:
f7:f5:ef:3f:65:1b:50:95:8f:79:50:5e:6e:5b:58:
80:5e:f5:a7:98:e7:c8:ac:c3:5e:17:7a:e0:f0:67:
49:7a:be:64:90:99:b4:df:da:c9:21:f1:cd:6a:cd:
12:59:fa:ef:8a:b4:3c:e1:4e:b2:20:b6:14:59:3c:
45:04:09:0c:45:1b:bf:21:c9:13:23:85:60:a7:c0:
41:89:51:3d:e1:b7:9e:73:53:6a:c8:ff:2a:79:7a:
b5:d2:b3:0e:f4:cd:a3:c9:2b:f9:2c:20:8e:e5:70:
46:6a:2e:29:c3:a8:cc:d6:1e:b7:07:3b:3e:a2:66:
c8:2e:e6:d2:57:63:69:70:2c:fe:f1:70:27:a5:b4:
50:5c:92:c0:3e:46:3d:13:51:5b:da:3a:b3:58:78:
33:b3:6c:30:99:75:44:25:bc:d9:0c:7a:d0:3c:b6:
bc:85:61:cf:ce:5c:dc:bb:2c:c3:0e:df:5d:ec:bd:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B6:EC:48:32:AB:DC:89:57:04:98:DB:CE:28:35:A3:C4:9C:75:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
X509v3 Authority Key Identifier:
keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.214.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:11:42:09:0c:ce:0a:76:7f:d1:0b:77:6c:b3:72:2f:0c:2e:
64:2e:d7:18:9c:28:d3:9f:f3:51:2d:b6:6e:7a:6d:fb:c8:81:
84:8a:37:f4:a9:86:78:25:d1:59:f0:ce:31:7a:b8:57:51:4e:
24:99:24:29:47:57:81:0b:1f:5a:3d:9a:14:2d:b0:b0:4d:f5:
c6:52:d7:f3:19:24:cd:b8:86:81:69:11:b5:fe:3d:94:b2:3e:
3b:2e:6f:ec:2e:73:0c:38:df:9b:3e:40:c0:c2:c3:2b:59:cb:
24:3f:3b:cb:57:b8:43:e2:0b:f3:a8:bc:7a:a4:d4:37:9d:e8:
3b:1c:0a:4a:13:3f:d9:5c:fa:65:eb:43:16:49:d6:19:b3:61:
8d:ba:23:b3:e2:71:01:34:f6:5c:46:74:87:de:0f:8b:ad:0c:
c7:f0:ad:59:83:a6:b7:ac:86:1a:91:5f:d3:f0:0c:6b:82:57:
a0:55:e1:4d:af:b1:bc:06:76:e3:0c:6a:9a:64:52:82:ff:ed:
08:73:42:a8:cd:88:63:f0:93:25:86:9e:42:d6:fb:a7:20:b8:
5a:71:a1:db:09:c4:fa:9c:82:3d:c6:e4:63:fc:30:3d:e4:b0:
e1:e6:ed:fe:2f:c8:af:2f:be:1d:ce:0a:7e:7a:39:0f:60:cf:
35:ff:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:01 2025 by rpki-client