Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa
File: 9e38af58-44dc-3d4d-8374-4dcd32e76092.roa (raw, json)
Hash identifier: cpoGTwU+tcTar/2SAtD/nZ39yaZVR3EGRMkzSWuJ4Jg=
Subject key identifier: 34:11:D3:E4:14:18:3C:4E:79:00:9D:7B:1B:08:1D:01:91:10:00:3B
Certificate issuer: /CN=22f50b3c-0004-4753-bb50-b088e784de4e
Certificate serial: 010D0C9F43285848143A7BE3DF3DB54809528580
Authority key identifier: D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 16509
IP address blocks: 158.51.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7b:e3:df:3d:b5:48:09:52:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f50b3c-0004-4753-bb50-b088e784de4e
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f21a7611-1953-4997-aaa4-f8908b1d7eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:ef:bf:b8:10:76:53:33:94:3d:c2:36:36:
98:11:14:f7:ea:03:49:a7:81:37:6f:c9:95:bd:28:
6e:c2:4c:ee:4d:d0:d0:c1:f4:ab:f6:1d:d8:b0:f4:
8d:9f:ba:f9:cc:af:bf:7f:97:8c:a4:e7:37:f8:79:
bb:1a:93:1d:d3:27:ee:3d:21:1a:a9:88:0e:11:46:
ef:c0:c1:11:05:50:d6:51:a5:ac:0b:ec:03:3f:65:
a8:e7:31:78:3c:95:02:0a:0b:bf:26:2e:9b:d4:78:
78:73:da:6c:22:c0:a0:bb:3d:10:1b:bf:61:c2:ae:
70:72:5e:e0:13:dc:b6:b0:8b:c9:98:0c:d0:7b:3d:
8b:af:5f:f4:09:83:84:d2:f7:46:1f:4a:d4:10:aa:
4d:fd:bd:be:61:e6:a7:79:02:40:16:f2:29:af:d1:
25:47:0d:ef:a6:7d:47:f5:50:ce:91:7b:fa:61:a6:
50:33:48:2d:b6:b1:51:cf:a6:62:e7:c4:aa:a9:d0:
83:9d:44:12:d1:38:ed:03:a2:8f:99:06:d5:a0:93:
5d:95:ac:2e:ac:cc:53:2d:4e:45:6d:9c:3e:4a:67:
17:8b:55:27:60:2a:fb:1b:48:fe:d2:69:50:95:ce:
f3:47:03:f7:6f:33:71:b4:fd:d8:f8:df:17:a7:6f:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:11:D3:E4:14:18:3C:4E:79:00:9D:7B:1B:08:1D:01:91:10:00:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl
X509v3 Authority Key Identifier:
keyid:D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:e5:78:ab:33:55:4f:75:fc:4a:a1:ac:e1:12:17:3c:76:96:
d8:f6:1d:77:c8:97:ee:f7:9e:e9:a3:1a:03:00:57:e1:b0:c8:
bf:fe:0a:82:85:e3:84:9d:17:97:c7:c0:a9:bd:f9:70:46:3d:
bc:22:18:e2:ff:35:3c:c3:bb:53:be:83:a3:a1:81:9c:e0:2f:
fe:7d:6a:6f:d5:6c:e4:b0:71:9b:06:96:33:c7:b5:a1:e6:bd:
9f:9d:cd:3a:53:e2:f0:2a:c5:3a:73:c5:3c:93:48:90:ad:d4:
15:3e:43:da:34:12:d8:42:23:f9:5e:96:d2:30:62:1c:45:10:
78:45:a8:ea:05:f1:b4:e4:fb:9e:fe:57:60:c3:56:cc:65:10:
88:4a:8d:33:7f:e5:42:fd:0c:42:43:f7:f6:ba:b7:f9:46:d7:
89:c3:9e:ed:b1:3f:2a:e2:c2:a9:bf:ba:cd:a0:e5:27:c3:f9:
c9:cb:d3:91:19:a5:d7:59:dc:0b:6c:83:e3:4d:da:57:1e:38:
4e:a2:5e:94:98:65:ad:87:0a:dc:18:59:6c:1d:f5:f1:3f:8d:
ea:18:6b:0c:99:54:f6:94:15:b0:a7:ee:4c:56:33:d2:9c:91:
75:20:57:84:c3:f6:de:b5:2c:ca:28:2b:93:00:ee:6e:57:15:
ec:9e:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:24 2025 by rpki-client