Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa
File: f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa (raw, json)
Hash identifier: agZC92lZo7xWCDbPlw5Y5KiQ4jR0r93MN/Y2jCiDGYA=
Subject key identifier: 74:DC:16:00:76:74:56:E6:06:EC:2E:6A:E2:AE:76:D1:03:A7:6D:39
Certificate issuer: /CN=22f50b3c-0004-4753-bb50-b088e784de4e
Certificate serial: 010D0C9F43285848143A7DE27C2B5281588D20A0
Authority key identifier: D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 14618
IP address blocks: 158.51.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7d:e2:7c:2b:52:81:58:8d:20:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f50b3c-0004-4753-bb50-b088e784de4e
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=98c0e5ba-a506-4715-9271-e918edc2628f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:7b:ae:87:cf:10:ee:4b:7b:77:41:bd:f8:
68:b6:32:3a:2a:4e:23:1d:28:0a:7f:67:ca:c9:a8:
c4:90:50:38:5c:80:98:19:35:42:0b:72:e0:55:ed:
3d:ee:0a:2d:a2:42:12:be:19:a7:cc:af:09:ce:4c:
a3:14:44:d8:e4:8c:a4:80:97:99:31:00:e1:de:ae:
be:a9:4d:e6:df:73:e4:06:41:12:3e:51:68:84:54:
03:9c:4a:3f:de:fd:10:30:c7:05:cf:69:cc:67:ff:
33:f2:b9:47:e1:e7:39:dc:fd:00:ee:da:2e:36:80:
c3:6c:be:7e:f7:63:ef:4a:1f:15:a8:25:f8:74:06:
7e:85:91:6f:e6:8b:27:7d:a0:a0:c2:57:37:76:55:
5d:c6:a9:de:ca:e7:90:92:67:b6:da:80:a3:86:b9:
70:2c:02:ad:8e:1b:e7:95:4c:6a:82:1e:d2:3a:60:
98:7f:67:6e:1b:dd:c6:20:ee:b6:de:ed:e9:37:05:
64:67:40:7d:fa:ea:ce:a5:d7:13:11:8f:0d:76:ae:
fc:0c:55:75:62:fe:0a:00:25:90:5c:5a:13:6d:8c:
eb:53:5b:a9:94:94:b7:63:64:3e:66:b4:b9:ab:3c:
5c:17:73:ac:15:69:43:c4:b1:67:8e:31:b9:5d:25:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DC:16:00:76:74:56:E6:06:EC:2E:6A:E2:AE:76:D1:03:A7:6D:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl
X509v3 Authority Key Identifier:
keyid:D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:a2:d2:f5:59:72:5a:ee:29:fa:8c:00:54:2d:73:08:ab:ad:
d7:59:d2:ec:af:63:a3:8c:78:3d:09:05:b1:a6:be:60:42:39:
3e:0e:42:a9:18:a3:22:e6:67:3a:bf:f2:93:8f:c2:9f:a7:57:
85:71:ad:35:37:af:81:32:c1:14:cb:a1:a6:cd:cd:19:44:b2:
91:ae:d5:66:b6:cd:e5:ca:2e:c4:2b:18:9b:f0:b9:fc:2b:d4:
47:86:0b:3f:1e:34:19:ac:7b:20:a3:00:1d:e9:da:9e:19:d4:
ca:8b:a2:9a:5b:d0:62:ac:52:41:52:83:1e:07:73:c6:85:3d:
a3:d3:fd:a6:47:cc:e7:62:a8:f4:19:92:32:42:54:cb:8d:7f:
5e:ef:d8:4a:09:72:81:a1:ab:f5:b1:8d:b8:63:88:a4:74:70:
3e:5e:73:e1:6c:e2:1d:99:66:73:46:de:9c:43:73:99:dd:3b:
14:6a:da:2e:a0:30:cb:3e:2f:33:ed:ec:66:fd:19:5d:7a:9e:
e7:52:22:37:64:b0:76:04:33:72:06:f2:1a:83:9a:f9:2b:1c:
e4:83:a2:a1:d1:37:4f:11:55:5a:4b:32:23:6a:97:3a:b1:2b:
21:ad:cf:81:c3:39:23:53:12:ca:c1:c7:42:fb:2e:cd:4d:55:
f6:ec:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:41 2025 by rpki-client