Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/b7eef4be-80b7-3b1d-9220-d57d94c78330.roa
File: b7eef4be-80b7-3b1d-9220-d57d94c78330.roa (raw, json)
Hash identifier: 8Z+o5nomYT4NIkSV5h5tGRm6Zxso2sY0hDUhkOmEV/E=
Subject key identifier: 85:07:6C:A9:7F:E2:F6:5E:FE:16:69:44:10:74:0C:CA:CF:D9:EA:E0
Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial: 010D0C9F4328584819CFCF2F94F270F0AC1BEB40
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/b7eef4be-80b7-3b1d-9220-d57d94c78330.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 7127
IP address blocks: 192.214.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:cf:2f:94:f2:70:f0:ac:1b:eb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=ddbc4b43-eb96-4507-92ba-6a0ec5ec2df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:ef:74:de:22:e3:a0:e6:a3:02:4b:da:f2:
a6:e0:99:b4:62:0b:89:eb:50:04:9f:ee:38:27:f9:
22:8e:06:8c:0c:58:f1:07:ba:41:16:f4:b4:a6:14:
9c:2b:d1:b4:3b:8d:fd:bc:a5:33:ff:d5:51:95:32:
0b:a1:d6:66:ac:5b:ac:5b:85:04:f6:7a:f9:7d:a7:
a8:9f:2a:e6:b3:11:23:5d:14:76:5e:06:82:fb:bb:
68:7e:95:29:10:46:70:78:bb:4a:ed:28:a8:8a:a0:
a0:0c:01:57:e3:5f:95:83:f4:41:7a:12:09:42:0c:
03:63:3b:ea:a7:bd:9a:8d:83:4e:8c:58:9d:cd:ed:
5b:b7:e4:fc:73:a5:b4:9a:1f:4d:db:8e:bf:04:f5:
83:40:fe:a6:43:48:0f:5f:bb:1d:72:47:25:91:f4:
fe:d0:04:74:7e:5e:2e:42:ea:f7:a2:9b:f7:1d:a2:
0f:c5:6f:03:fe:f1:fb:af:e8:4c:98:0e:2f:ec:68:
85:96:30:6f:a2:35:9f:4c:b6:60:18:11:7a:44:d9:
e3:5e:f7:1f:ae:3a:db:51:cc:cc:f6:5d:2d:26:ac:
26:f1:b0:c0:a1:e4:dc:07:66:7e:73:2f:a3:83:0b:
09:d5:89:a5:09:32:7e:16:a8:a4:72:3a:27:0e:0c:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:6C:A9:7F:E2:F6:5E:FE:16:69:44:10:74:0C:CA:CF:D9:EA:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/b7eef4be-80b7-3b1d-9220-d57d94c78330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
X509v3 Authority Key Identifier:
keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.214.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:43:f9:ed:c2:17:71:93:44:18:82:d8:c0:1c:83:2f:be:c1:
ee:90:b1:f9:1c:7f:78:ab:1f:86:83:3a:91:04:be:4a:04:e5:
53:9d:2a:7f:44:5b:a9:f9:65:54:1a:c9:3f:8d:87:94:e5:be:
28:c7:87:e4:df:04:82:65:cd:ef:5c:a3:cd:13:cc:68:06:0f:
82:53:e8:66:4b:ee:be:89:77:a6:d2:f0:33:ca:f8:84:ad:2f:
62:4b:4d:1b:79:99:64:20:6f:27:09:40:1a:11:cc:88:b5:1b:
24:9b:6c:c7:2e:55:cb:23:7b:5e:b6:4b:18:9e:ca:0e:01:79:
47:57:db:d6:e8:1a:cb:a4:b7:d7:d1:a7:97:cb:c1:59:b9:b1:
08:28:d8:a8:22:66:7b:96:df:31:d7:24:0e:c8:1c:89:bd:8f:
ca:22:ec:dd:8b:15:dc:11:70:5a:c9:72:23:01:4b:17:7d:7c:
23:0b:54:7f:94:5b:50:cf:c9:ed:8f:09:29:55:9e:0c:ef:15:
9c:00:08:8f:20:d1:79:79:7d:61:0d:3d:8f:32:8e:dc:05:96:
52:75:02:6a:a5:3d:b9:5e:cc:22:6e:c4:85:e0:95:c9:59:a0:
2f:f6:ae:8d:f7:16:b0:33:80:b1:17:d1:1f:f9:82:48:bb:35:
64:09:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:18 2025 by rpki-client