Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa
File: 8462c1ed-9529-306f-9950-18fd383eb4c7.roa (raw, json)
Hash identifier: SkonL2f09KS1y1P0Hyd86dSs+gkaCQxf83psj8wCFO8=
Subject key identifier: E1:E1:8C:AB:7C:E7:25:60:43:16:AF:40:2E:7D:2D:76:78:4D:ED:E8
Certificate issuer: /CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8
Certificate serial: 010D0C9F432858480644FBD1C444DA025BB94400
Authority key identifier: 37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 64223
IP address blocks: 192.251.56.0/24 maxlen: 24
209.94.85.0/24 maxlen: 24
2620:70:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fb:d1:c4:44:da:02:5b:b9:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=ba6b0926-08d2-4e83-8d2b-f77d0bca7987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:69:93:26:ab:82:7d:69:ac:7f:78:6c:ca:
ef:07:91:fc:64:12:7f:39:4c:93:81:e6:7b:65:45:
43:7f:99:be:a8:0c:19:e2:5c:02:9b:ac:ed:03:bc:
c1:9c:09:f0:28:18:f7:f3:ad:8e:1d:e4:ac:57:95:
8c:61:be:81:14:25:31:bf:92:e7:c2:ef:13:99:81:
47:c0:0b:e8:86:f6:f5:b5:d1:f5:2d:ee:e5:63:b8:
1a:03:e6:4c:d6:3b:24:ac:35:7d:dd:90:df:a3:f1:
d0:b5:87:4b:ee:93:16:c2:95:dd:c0:4b:f8:14:83:
e1:1d:86:2f:c0:a1:86:25:03:39:f1:83:aa:f9:65:
b0:93:4d:ca:2a:e4:e1:07:10:df:aa:1b:a0:59:ec:
17:a8:7d:96:c9:c9:90:8b:b8:99:aa:9a:89:b5:4d:
9c:cd:90:12:f5:46:36:d5:7c:d6:87:3a:34:2f:2c:
cc:80:36:04:55:75:b3:9d:61:08:0d:53:dd:5a:2d:
d9:5e:76:30:fc:15:d8:53:c2:a5:19:95:be:a9:e6:
e6:37:9b:cf:04:9e:e1:16:59:f0:c7:7e:f9:f9:0c:
a2:01:ca:23:41:28:8e:e4:0f:73:9b:29:0f:92:13:
57:7e:7d:4d:e1:70:7f:4c:f3:06:81:58:e7:da:b7:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E1:8C:AB:7C:E7:25:60:43:16:AF:40:2E:7D:2D:76:78:4D:ED:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl
X509v3 Authority Key Identifier:
keyid:37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.251.56.0/24
209.94.85.0/24
IPv6:
2620:70:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:e8:ef:5f:3b:e2:b2:2e:6b:46:74:47:b2:78:bf:01:ca:ba:
f5:fb:1e:90:91:f2:b8:d9:38:f6:ce:2e:ca:12:22:12:62:a6:
6a:bb:1b:2e:9e:be:94:53:aa:e4:c6:64:f5:a2:51:ad:86:b0:
b7:c1:4f:26:6b:60:a1:c5:29:f3:15:35:26:8c:02:fa:79:d8:
d3:cd:01:39:d9:85:90:c0:7b:28:7c:97:1e:0d:8d:78:1e:72:
a2:82:1a:51:82:19:35:42:73:cd:da:a1:4c:d2:f6:0e:49:1a:
35:a8:39:d1:e8:81:4d:3b:f6:dc:f5:12:b2:f3:3c:46:22:5b:
b3:76:42:30:73:18:94:80:5a:61:e3:63:eb:ef:60:1b:db:1e:
66:97:ed:e6:8b:47:94:5e:ad:90:9d:f4:41:17:cc:4f:fe:7d:
d1:37:cd:57:1e:96:bf:c8:d0:76:44:b1:43:1c:0e:f0:76:ce:
6b:00:17:d0:99:76:86:fa:13:5c:32:7c:5a:9a:f2:15:36:cd:
b4:55:60:66:96:4b:1d:db:36:9a:eb:fd:fc:af:b6:d6:90:eb:
fb:51:54:fd:7a:a4:87:4f:fe:69:5a:1b:c3:2e:57:8f:0c:83:
22:b9:41:a3:a0:8f:70:67:de:67:09:7f:e9:1c:56:a4:4f:07:
56:66:07:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:25 2025 by rpki-client