Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/8e308c21-96a9-3c5f-9236-af36b607b789.roa
File: 8e308c21-96a9-3c5f-9236-af36b607b789.roa (raw, json)
Hash identifier: Rsyw4Dn1h1yPuJkyArrhGGJsfz/3O4rwWptJPOMHyi4=
Subject key identifier: 0D:76:33:CF:6E:CC:66:4B:F1:68:0E:7E:1F:FA:9E:0F:46:17:0B:73
Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial: 010D0C9F4328584824FA847BFB66290A33A4EA40
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/8e308c21-96a9-3c5f-9236-af36b607b789.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 7127
IP address blocks: 192.212.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:84:7b:fb:66:29:0a:33:a4:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=41c90f88-d235-4d56-a23f-cd6e4097d12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:a8:d1:fe:7b:45:4f:de:2d:1a:63:53:8b:
d1:a4:a2:5c:e8:f2:1d:92:6e:5c:ef:40:89:71:ea:
b9:1d:ba:4d:d5:c4:9e:7c:d9:9d:cf:3b:41:8f:02:
f0:4e:6b:f5:5d:73:d6:57:61:49:a7:49:aa:0a:a5:
b4:e3:0d:e0:c2:d2:88:fb:37:70:6c:5b:7a:47:03:
50:71:0c:24:31:dc:6e:b4:c2:8f:30:c7:55:33:64:
6a:70:f0:d1:d8:a4:de:f1:7e:fb:e3:66:01:a0:71:
df:18:46:c2:c3:ff:0a:ac:14:cb:d1:2a:4a:b9:b1:
b8:db:7e:f6:ef:0e:d5:9a:fc:9a:bc:cb:5a:96:bc:
c2:35:e1:52:7d:84:80:9a:ab:17:0f:ea:a8:a0:2f:
1e:1b:ac:43:d5:d0:f0:42:b7:ab:0e:a4:34:a1:d5:
6c:3c:e9:27:36:8c:c5:24:bb:ef:82:cd:f3:1b:da:
c8:ea:c6:19:7c:0a:88:93:31:ae:26:6c:4c:e9:1e:
41:c2:14:18:bc:a1:a2:7b:fb:1b:c9:0e:28:1b:48:
e6:8c:b3:50:29:38:ab:c7:05:58:82:33:b2:08:68:
c0:7a:68:17:ea:a7:81:cc:e8:55:62:83:96:dc:a4:
c1:f4:d3:62:87:6d:b8:17:84:2b:53:63:c8:59:a2:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:76:33:CF:6E:CC:66:4B:F1:68:0E:7E:1F:FA:9E:0F:46:17:0B:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/8e308c21-96a9-3c5f-9236-af36b607b789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
X509v3 Authority Key Identifier:
keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.212.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:b1:59:92:f6:89:0e:b6:30:a6:54:70:64:82:04:b6:69:70:
f0:b4:44:33:a9:c7:cc:dc:9e:6a:ab:6a:e4:bb:c0:2b:0f:45:
c8:5b:62:c9:d5:a2:03:e3:cf:15:c1:70:fc:0a:9e:7b:4d:12:
c9:90:4a:95:bb:30:2b:da:e5:49:9c:12:55:6b:25:44:73:37:
12:f2:96:a0:d3:58:b6:ff:e2:f9:b6:e4:de:9f:d2:f5:5c:cc:
6f:6c:63:57:00:27:8d:88:91:bd:7a:c5:a9:88:ce:e7:c2:d3:
54:ac:8a:f7:18:22:37:82:05:ea:21:6c:e1:bd:ad:61:0c:15:
82:0e:a8:c9:6e:77:a3:af:fd:f9:e8:26:3c:20:28:be:0b:8b:
bc:cc:a9:13:bb:ab:fb:20:20:d2:e8:4d:0f:d8:cf:f4:10:00:
af:21:69:41:bd:bf:a3:9d:da:0f:0a:8b:06:51:04:43:72:3a:
cb:f8:b4:48:be:a5:db:56:e7:4d:2d:bd:c1:8a:22:51:39:0a:
92:62:67:7f:c8:13:ff:70:c8:67:e8:a8:58:f4:0b:90:b2:7a:
ec:7d:ea:ca:cc:7a:bb:83:8d:d6:87:b8:82:fd:7b:ae:d5:ef:
d6:3f:2d:0c:d7:9e:ba:a5:f5:ef:76:47:4c:a6:d1:6b:6b:f6:
e5:ea:5a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:46 2025 by rpki-client