Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/bb0e916f-4055-3092-b589-081a564222fd.roa
File: bb0e916f-4055-3092-b589-081a564222fd.roa (raw, json)
Hash identifier: OcQE7HsT3uXgeh0/rLUvZBYdOjH8UqL7CZ8d4CMJ6QU=
Subject key identifier: 8A:91:FA:77:E1:C8:BE:88:8F:03:64:FC:4D:00:DE:61:88:FE:0B:D8
Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial: 010D0C9F43285847E78F61E936517D0888F74E00
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/bb0e916f-4055-3092-b589-081a564222fd.roa
Signing time: Sun 17 Nov 2024 02:00:28 +0000
ROA not before: Sun 17 Nov 2024 02:00:28 +0000
ROA not after: Sat 15 Feb 2025 02:00:28 +0000
asID: 396982
IP address blocks: 199.9.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e7:8f:61:e9:36:51:7d:08:88:f7:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
Validity
Not Before: Nov 17 02:00:28 2024 GMT
Not After : Feb 15 02:00:28 2025 GMT
Subject: CN=9d751622-7df9-4cbe-a0cc-3b1a093d6543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:9d:51:f9:90:a9:c1:aa:6e:2b:f4:fd:71:
65:19:c3:ff:85:14:a4:19:10:2d:89:d8:45:61:55:
87:1c:ac:c1:7c:9d:ca:34:7b:c4:31:95:86:cc:a2:
e9:fe:da:e7:d3:79:ad:76:4a:76:21:3a:28:86:a0:
ab:fb:50:47:cc:5d:c3:e8:0d:b4:68:d7:a5:2a:ad:
a5:65:4a:a0:6c:12:cf:88:a4:0d:a5:e5:20:ed:29:
d1:64:5a:0d:e7:25:f8:2b:15:f5:1d:1c:55:e6:5c:
4c:10:f1:76:cb:ca:9d:fe:e3:8d:cc:16:55:82:92:
80:36:1e:50:0c:e0:b7:2b:8b:fd:fe:77:5f:c1:94:
8f:ca:1b:49:70:3f:72:e0:e7:16:5b:bc:b3:a2:c2:
4e:fb:7d:35:af:bb:a8:2f:79:34:17:6b:75:96:bc:
38:e7:ca:74:32:70:4e:04:f6:bd:a6:b9:82:07:06:
1d:79:c7:42:bd:08:60:c8:a7:e4:d2:31:0d:6c:bb:
1f:6e:8d:66:7f:b0:1e:a7:05:dc:8b:83:17:86:f9:
80:e6:7a:8d:70:54:a2:db:71:e4:3d:e6:a3:3d:7b:
ac:3f:13:7e:c7:58:f6:14:33:22:2c:73:94:29:45:
d5:f9:2e:c6:03:61:cb:83:a3:e4:68:dc:bc:e0:e7:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:91:FA:77:E1:C8:BE:88:8F:03:64:FC:4D:00:DE:61:88:FE:0B:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/bb0e916f-4055-3092-b589-081a564222fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
X509v3 Authority Key Identifier:
keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.9.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:3c:a2:a8:13:4a:64:f9:01:90:e6:11:2d:f8:7d:7f:58:0a:
5a:ac:8b:5f:84:2a:79:11:40:64:0a:e8:af:e8:ba:e3:cb:98:
21:95:92:f4:a1:f4:a0:05:4d:00:eb:f7:e9:3d:71:9e:b8:5d:
6e:99:55:2d:1b:4c:f0:ce:47:e8:20:e8:d1:df:d3:ea:1f:dd:
2e:05:5b:1c:b3:5c:60:74:67:49:2a:6b:2c:9f:1e:e0:16:1e:
ae:cd:be:74:0b:42:d8:05:53:23:ef:ce:cd:a1:5b:6f:30:cd:
1b:4c:e2:ad:f9:ff:93:73:1c:64:dc:9a:ea:89:4b:84:68:d1:
35:25:f5:30:a1:b9:e1:ce:c9:63:d8:7e:e4:0f:30:de:03:6e:
69:d4:38:c1:e4:7e:7d:66:49:87:03:9c:14:10:ca:05:7a:fa:
c0:81:78:90:18:a4:74:8e:0f:6f:3a:b2:4d:d6:b4:b8:67:e1:
26:7d:9d:ca:10:a3:eb:cb:41:69:80:2d:77:26:37:5a:1d:4a:
b4:43:b6:75:c2:67:54:62:45:d0:23:c0:7e:12:47:cf:3c:14:
4f:c8:89:e9:d6:a3:be:b9:bb:6f:ec:42:04:74:e9:2c:6e:e2:
0d:0f:3b:0b:bb:64:fe:70:b5:03:28:15:14:f0:1b:7e:14:68:
65:4c:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:43 2025 by rpki-client