Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa
File: 7125b790-7228-3b2f-91fe-5b1dd486ea42.roa (raw, json)
Hash identifier: JaptEItzT9cGh3ziu3qQmi2j+jLyOiKsXhxWJmrY3ZI=
Subject key identifier: 14:9C:DE:AA:D2:80:86:D8:36:5F:ED:44:78:DA:B1:C2:0F:BF:53:80
Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial: 010D0C9F4328584877BA2D61946137423DB9EDE0
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa
Signing time: Tue 07 Jan 2025 17:23:12 +0000
ROA not before: Tue 07 Jan 2025 17:23:12 +0000
ROA not after: Mon 07 Apr 2025 16:23:12 +0000
asID: 212238
IP address blocks: 168.91.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:ba:2d:61:94:61:37:42:3d:b9:ed:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
Validity
Not Before: Jan 7 17:23:12 2025 GMT
Not After : Apr 7 16:23:12 2025 GMT
Subject: CN=bc4b98bb-19b2-47aa-a0b2-7dd3b62c17fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:a4:af:bd:80:bc:87:78:84:26:89:33:ba:
4f:df:06:6e:c5:4e:db:ea:1b:9b:8a:a2:51:98:db:
57:90:fc:9a:fb:de:75:ff:9e:d7:8d:24:98:47:0f:
75:7e:f1:ba:5a:08:2f:f6:03:af:e7:5c:0c:72:11:
40:56:85:0c:3d:21:47:b7:9a:92:cc:c0:14:82:ef:
e7:b5:2b:50:e8:7b:d9:2c:29:26:77:98:fe:cb:b2:
b0:cd:83:85:39:8e:23:f0:17:bf:91:83:fe:3d:aa:
a3:97:75:47:a7:6f:99:4d:c9:00:10:ae:f5:31:b4:
56:24:e6:8b:78:76:a9:01:cb:78:e4:69:4a:9c:2e:
c8:5f:e4:d6:66:0d:13:e4:79:3f:1c:b4:00:84:79:
4c:9d:0e:74:72:ed:83:bf:41:55:e4:cc:28:7c:fc:
be:24:10:d7:cf:2e:3d:53:7b:e0:8c:14:a4:91:fa:
c3:87:9f:1c:23:e0:1f:68:4d:6d:bb:d1:3d:25:2d:
d1:e9:b4:69:e4:d0:27:d1:60:1b:85:2d:5a:f8:51:
2a:74:2d:ac:8b:68:53:c3:36:df:b6:eb:48:e6:e3:
4e:e2:b3:9b:4c:08:5e:ee:aa:83:e6:c8:73:5e:be:
19:ff:24:01:1c:2f:2a:2b:d7:fe:76:b0:79:2b:12:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9C:DE:AA:D2:80:86:D8:36:5F:ED:44:78:DA:B1:C2:0F:BF:53:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
X509v3 Authority Key Identifier:
keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:8c:1e:23:d0:49:94:d0:c7:b5:2b:25:31:29:75:7f:14:e7:
9a:e7:84:85:38:31:b6:dc:3b:4a:7b:1b:8b:2b:d0:d9:65:25:
6f:60:d0:0c:4d:21:72:1f:70:10:15:28:00:27:79:a8:df:d8:
bf:11:ed:f9:70:65:9f:bf:31:0f:23:41:de:be:98:ff:0c:cf:
d3:00:76:86:35:77:41:dd:90:70:2f:08:dd:9e:a6:12:40:f5:
dd:99:81:60:5f:f6:42:8c:12:93:ba:8a:7a:7b:ad:d4:69:68:
8f:30:f5:e2:be:ea:5a:e4:33:70:ac:c0:c8:56:43:87:d7:d5:
6c:82:40:18:70:e1:05:0e:75:34:1b:17:d5:ec:71:b7:ec:d7:
63:fb:82:b0:59:b0:ca:74:a0:39:af:c0:cb:f1:e7:e3:12:eb:
9f:c8:37:00:70:6a:53:b9:1d:35:95:e0:db:fe:40:11:fc:c1:
c6:76:0e:37:50:90:0a:06:db:6f:85:6a:d6:5d:d4:a6:60:12:
ed:5d:56:08:d3:5d:30:c2:11:90:2b:68:54:68:f5:ae:41:09:
d2:7f:4f:fe:c8:d9:21:88:03:37:c5:c0:bc:bd:ad:6a:16:dd:
b7:33:85:a2:0c:81:93:52:8d:8c:06:83:94:2f:aa:b8:6c:d7:
c4:5c:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:52:29 2025 by rpki-client