Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa
File: 91a7be32-bce2-39d0-bcf0-6b212251eea4.roa (raw, json)
Hash identifier: MtCtWya2MVNXSHOIbl7sYrzFPfurDOkbqUfY1B+5XmA=
Subject key identifier: B7:7D:C0:FF:FF:D9:72:72:D7:E7:5C:BD:90:31:4F:33:A8:71:1E:DC
Certificate issuer: /CN=f3280fa0-3649-4902-978e-e7711edc5a33
Certificate serial: 010D0C9F4328584800AF7EE55FEBB06BC8ACF200
Authority key identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 20473
IP address blocks: 141.195.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:7e:e5:5f:eb:b0:6b:c8:ac:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3280fa0-3649-4902-978e-e7711edc5a33
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=b5177589-419e-44b1-9430-5aea7d6ecb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b5:09:a6:7e:d5:79:dc:0b:ba:6b:73:99:86:
8c:04:d7:17:52:fa:9e:7f:e7:ca:c0:81:0b:00:ab:
7c:6c:cc:5f:78:6a:34:04:58:97:44:73:36:1f:c5:
a6:6c:16:df:92:eb:29:a5:e3:71:5f:21:3d:d8:d8:
43:32:02:00:9d:0e:e4:7d:74:aa:93:1c:8c:d7:96:
4f:d3:ce:83:bc:eb:3b:e5:7b:b3:00:f9:bc:88:5c:
9d:4c:b7:9c:97:fa:2a:96:82:75:25:28:d0:c7:fd:
d0:d1:42:50:d6:21:cb:6a:2e:71:42:eb:c3:88:71:
79:42:25:62:04:2b:55:49:71:14:72:d9:ff:4e:36:
14:bd:68:8a:e7:72:fc:51:90:34:dc:66:84:cf:56:
b5:bb:5b:18:a5:da:83:43:2d:9b:09:ed:82:72:c5:
b3:bc:a4:f4:49:51:9d:4b:09:1d:fc:32:65:94:71:
8d:8d:ba:9f:52:f6:6f:1c:54:fc:1d:62:8b:21:f9:
14:61:98:86:0c:cf:44:5d:a5:61:ab:38:68:6b:e9:
48:38:0d:ee:47:06:c7:cb:10:d0:78:d1:9b:0e:6d:
50:97:ea:33:c1:b1:0d:df:3a:df:17:bf:87:10:fa:
c2:c4:f0:39:a8:c2:28:3a:67:e6:4b:90:a8:56:f8:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:C0:FF:FF:D9:72:72:D7:E7:5C:BD:90:31:4F:33:A8:71:1E:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl
X509v3 Authority Key Identifier:
keyid:2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer
sbgp-ipAddrBlock: critical
IPv4:
141.195.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:6c:8a:27:6d:3e:90:6a:4f:d9:6a:7c:f1:36:00:61:b7:bb:
7a:92:af:d1:94:50:d0:15:df:4c:51:6a:ee:2e:8f:26:39:8c:
35:25:a4:7f:b0:f2:ab:61:77:58:21:d8:1a:78:01:3d:95:8b:
56:ee:1f:99:3e:a5:21:2f:04:26:21:4c:67:05:b5:33:58:1c:
99:cc:f2:ee:a5:12:f3:57:2c:3e:41:6f:d3:ee:24:ed:f5:e1:
e3:2e:d0:9f:33:62:71:03:8b:ec:b0:98:d2:37:d1:e0:bf:8e:
de:e4:45:80:b8:1e:7c:4e:19:20:0a:af:c3:18:45:c1:2b:e4:
79:9c:68:41:c8:5e:f6:b7:4c:8c:ed:1f:74:d1:1b:cf:b2:48:
98:db:63:d6:76:a5:d0:62:3a:a4:c0:35:d0:45:01:88:7e:96:
49:e5:cb:8b:cc:33:25:ff:59:e3:a8:46:ac:e3:0d:35:35:14:
d2:1a:bd:26:5d:6c:c6:52:e2:c4:a5:16:d0:00:8e:37:37:e8:
51:cb:db:50:9a:8c:6b:d3:91:f2:f1:97:63:fc:16:35:b0:b2:
1d:4f:08:cc:03:81:79:d5:c5:e4:6f:ce:66:4c:a6:ee:90:c8:
17:97:85:99:bd:42:b1:ae:79:4c:b6:10:c2:8e:8a:89:c0:7b:
74:65:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:00 2025 by rpki-client