Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa
File: 2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa (raw, json)
Hash identifier: qUnG8wOrrjll27pq4LnUpxy164qd/lW6J+IqQAIs0yU=
Subject key identifier: 25:32:05:C6:13:53:81:F2:E1:AB:B4:7A:F7:44:FD:47:A7:87:06:AC
Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial: 010D0C9F4328584854702BC3ADA64396EF2C7100
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 5650
IP address blocks: 168.91.92.0/24 maxlen: 24
168.91.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:2b:c3:ad:a6:43:96:ef:2c:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=cc566240-382c-4596-9fcb-d700c1e6c370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:20:1b:fc:32:b0:d6:ce:67:89:c2:97:b9:
0a:28:8c:15:9d:90:0e:15:7d:a1:c3:50:08:2d:68:
ab:50:62:e7:68:ee:4f:ca:43:70:92:b1:94:d0:77:
22:74:a3:66:06:51:1d:36:2b:88:c7:81:5c:75:a8:
b3:2d:3f:44:14:c9:1b:9f:16:c5:2d:cc:81:2a:c3:
c8:4a:7a:b2:fd:b3:9b:54:86:db:dc:12:fe:94:32:
10:5f:60:1f:a5:58:84:c1:81:c4:bd:d7:c7:04:7d:
80:cd:a9:59:c3:9a:80:25:3c:c7:38:eb:5a:6e:bf:
5a:0f:d5:ce:8f:bd:6b:d8:5f:ed:68:03:64:2d:06:
c5:8e:1f:b6:97:1e:9c:3e:85:5b:98:bc:a7:67:f8:
2a:fa:d7:59:53:04:8e:b0:84:99:69:eb:82:61:f5:
fb:08:41:57:72:29:4b:4a:2c:04:ed:8f:7a:80:11:
6e:cd:66:da:ee:01:44:49:df:c3:46:88:cc:45:c6:
c1:5a:32:6c:a9:86:5f:3e:41:9d:ee:2e:a1:0e:02:
f9:a3:71:2e:b1:2b:fa:c2:05:01:a7:c7:35:bb:bc:
bf:84:c8:23:70:b5:1f:87:a6:e3:90:b8:76:d1:d7:
78:53:aa:dc:39:2c:ea:78:1d:29:0d:e9:ff:68:0b:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:32:05:C6:13:53:81:F2:E1:AB:B4:7A:F7:44:FD:47:A7:87:06:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
X509v3 Authority Key Identifier:
keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.92.0/24
168.91.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:f4:41:9f:5d:e6:d3:c8:7e:8d:ee:cb:19:73:cc:52:37:a2:
00:3b:22:97:52:fc:5d:8e:dc:d0:01:fc:1b:ab:e3:ea:98:d5:
07:6a:05:99:eb:6c:2c:de:c9:ae:2c:fb:5d:cc:3c:6d:7e:65:
f1:87:d8:30:31:f6:22:27:57:60:90:b6:6b:0a:dd:de:c2:08:
89:f1:87:bd:36:0e:7a:aa:29:b3:6a:92:28:da:38:0f:a2:eb:
be:d8:fc:a4:f5:2e:ce:a5:c7:b5:fa:de:d7:8e:4b:94:7e:ca:
af:3b:d0:8e:c5:c8:a5:34:26:f6:5f:c4:31:78:54:92:84:d8:
ec:22:10:d2:6b:84:9e:85:fb:7f:c5:4e:6b:46:16:0f:0a:4c:
11:99:18:d1:a4:8c:3e:34:83:5d:d2:c1:8f:02:de:4d:67:ec:
2d:2b:f3:20:58:dc:a4:db:8a:ba:af:60:e4:f9:00:7b:f2:f9:
fa:4c:e1:7c:cc:19:bc:ae:99:d0:a6:0b:a8:6f:bc:ca:0b:52:
b5:23:0f:45:e7:e7:e0:36:03:ed:cc:aa:30:f5:d5:2f:6a:4e:
56:4d:1f:e9:7d:00:e4:49:b4:a9:f4:73:05:1f:b9:9f:d4:0d:
e5:b8:d2:38:73:b8:ee:2a:2f:44:e1:9e:10:3b:0a:74:e2:22:
03:bc:83:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:30 2025 by rpki-client