Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
File: d14790e7-dd79-381f-8bae-9db9eff096c1.roa (raw, json)
Hash identifier: U3tk59IAYPULNrhAzdSYA9Vnzlc5WHIsh0pAJc0CJ2Y=
Subject key identifier: F5:4A:DB:9C:6C:B8:4A:AE:D5:F5:4C:A8:42:45:77:CA:4D:8F:6F:6F
Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial: 010D0C9F432858486C2B0EEEB7FC9BDEDF8EB7E0
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 62494
IP address blocks: 198.60.113.0/24 maxlen: 24
198.60.114.0/24 maxlen: 24
2607:fa18:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:0e:ee:b7:fc:9b:de:df:8e:b7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=210a5e05-7760-483d-a52e-36ddf955ceda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:78:de:92:85:92:ad:67:fc:ab:40:1b:18:
fb:36:75:b7:6b:7c:50:10:28:a0:c1:00:7e:b2:e8:
57:ad:ad:12:1f:dd:e2:22:e7:24:37:19:43:1c:6a:
df:25:a6:69:70:b3:74:53:36:fb:b0:8e:24:b7:a6:
48:e2:10:7b:68:97:8a:82:37:86:67:ca:a3:4d:43:
98:7c:fa:88:a2:e1:66:dd:07:63:77:17:a0:33:9a:
89:0f:11:84:93:a6:b6:13:1e:6f:9e:5e:9a:83:3c:
58:82:c6:8f:ea:9a:6f:99:53:12:23:49:0a:41:a5:
c4:0f:87:bc:ef:54:5a:b5:18:c3:95:bd:46:43:79:
25:bc:1c:59:82:84:cf:86:5a:98:14:bb:6c:43:2b:
05:26:a3:18:b4:80:28:56:5a:00:2d:24:4b:41:6b:
50:fe:a3:01:26:94:83:cf:77:5f:28:83:ce:7d:43:
85:db:cc:20:5e:7c:6e:69:8b:4d:32:81:9d:e4:ab:
8d:00:d9:e5:49:c7:f1:7d:c6:c1:f0:c6:2d:96:aa:
02:8d:85:0c:ba:59:fa:c6:67:27:11:05:31:92:ad:
34:35:89:21:7d:03:6a:0c:7d:c6:d5:40:f8:ee:04:
c6:34:67:24:a7:16:ad:e1:cd:db:77:b5:61:59:a8:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:DB:9C:6C:B8:4A:AE:D5:F5:4C:A8:42:45:77:CA:4D:8F:6F:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
X509v3 Authority Key Identifier:
keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.60.113.0-198.60.114.255
IPv6:
2607:fa18:8000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:38:21:c0:56:28:38:e4:d7:08:1e:bc:f7:77:fd:ad:da:2c:
41:80:36:38:99:20:c5:e2:b2:b8:3f:c1:96:9b:00:5a:33:b7:
c3:41:5d:ef:80:52:fc:dc:d8:e8:f4:d6:62:67:38:95:ea:a2:
e2:72:b6:40:cc:0e:d1:a6:bd:38:03:51:d7:bb:bf:42:d6:72:
6a:a2:8c:a9:3c:1c:37:72:60:02:5a:d7:0d:46:85:66:df:0a:
91:28:ec:23:27:b4:be:4b:59:ff:4a:c6:72:63:0b:1f:e3:95:
eb:b7:ec:06:c9:c6:d7:c3:56:0b:46:39:79:e2:bf:06:b8:d9:
14:2c:a8:3b:c7:59:d6:ab:5d:0f:b4:13:7a:1a:da:90:d8:f3:
f4:d2:f9:71:c5:22:ca:58:79:21:fa:fd:3e:b1:54:72:d3:7e:
1d:0d:16:ce:68:3c:12:c4:a0:98:56:9d:78:7b:53:fc:67:21:
16:80:00:e8:d5:85:e4:16:a5:5f:19:dd:23:3c:44:ec:50:0b:
60:54:ef:d6:56:f7:d5:f6:75:5c:03:0f:b4:76:4c:ec:77:a3:
04:aa:3a:a7:2b:a1:ba:e5:b1:41:27:20:c8:07:98:b2:76:db:
21:d5:bd:82:45:3c:25:ba:4c:e0:4a:db:27:ec:1a:a2:d4:3e:
ca:c9:f3:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:07 2025 by rpki-client