Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa
File: d0fcc039-2f32-343e-aa66-e2094066ddfc.roa (raw, json)
Hash identifier: wqPcgg8NrRvot6JSuYZ7tZX55MAHjl1DoFcwPTeCqDI=
Subject key identifier: 16:71:D4:8D:BA:44:62:B9:35:DE:46:D1:28:DB:72:0C:F8:6C:5D:DC
Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial: 010D0C9F432858480BDA70204E0C9BC68407C130
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 394353
IP address blocks: 199.9.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:70:20:4e:0c:9b:c6:84:07:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=38c9f9e9-c8c7-4823-aea6-73d85e139652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e6:f9:2f:ea:ee:ac:34:6d:04:35:37:e3:03:
ef:28:33:a1:e7:44:30:0e:39:9f:70:9e:3d:90:6f:
74:d3:e4:a0:45:6c:88:22:ba:d8:a7:b3:36:0f:e2:
90:82:4e:e5:ae:ef:9d:83:6c:c8:c3:cd:38:91:ff:
a5:15:25:4b:03:a5:12:14:5b:b1:8a:01:0a:e5:72:
82:8c:86:8b:75:66:d8:73:62:47:a8:af:ac:77:15:
9a:59:88:66:03:bf:10:c8:b5:da:b4:c6:b6:a1:09:
30:9c:4e:a5:87:7d:4c:71:46:66:ab:03:e9:50:49:
ab:f5:59:40:d9:a7:ab:c4:c5:df:be:79:76:8b:1d:
48:a2:b2:3e:34:3c:d4:93:51:37:54:be:6d:7b:53:
5f:f1:17:78:b7:49:8f:fd:07:ff:fd:6e:5c:13:ee:
3e:03:ec:12:dd:91:59:7b:9f:c5:5b:34:e7:97:3d:
9b:b5:6b:df:80:be:45:aa:c1:72:e7:71:13:cb:36:
9f:4d:f9:22:9b:82:c4:40:55:bf:bd:dd:6c:53:4d:
6b:67:04:1d:03:1a:00:96:9a:f8:90:28:76:86:5a:
fa:4d:50:d6:5b:66:56:a2:99:c2:49:7a:c7:f9:8e:
ff:02:08:09:0a:ba:eb:4f:d2:86:fd:7d:ea:05:c1:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:71:D4:8D:BA:44:62:B9:35:DE:46:D1:28:DB:72:0C:F8:6C:5D:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
X509v3 Authority Key Identifier:
keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.9.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:fa:b5:d9:6c:d5:f0:69:57:56:cb:3e:b8:56:ed:23:2e:9e:
64:64:53:8b:13:2a:e8:ac:30:ff:d0:d6:f9:ea:c4:91:79:0c:
d8:22:93:8f:26:ef:3e:96:51:74:8d:cc:b5:ef:72:e9:c1:38:
0a:1e:5d:c0:b3:29:09:2d:8b:b2:0e:e8:82:52:ff:ee:75:f7:
24:e5:5f:0a:88:8b:bf:4a:1b:49:08:b3:0f:ba:bd:de:fc:68:
11:37:c8:7f:26:33:a8:a2:2c:ef:18:57:b6:b1:e6:fa:fe:48:
a1:4f:fe:7c:3a:10:79:1a:7a:67:7f:3e:0f:6c:c3:39:45:1a:
21:63:50:36:5e:2b:9e:83:40:d9:05:3f:0b:25:95:c6:24:9a:
f2:b2:7d:e6:40:01:e4:b5:fd:94:56:19:50:0b:55:ce:0a:79:
d2:c0:86:d4:01:f8:30:3f:82:bf:39:50:9d:dd:ca:f1:5a:4c:
4f:d8:21:70:1a:09:9a:c1:57:d2:8a:0e:a2:c7:3b:91:72:cb:
4e:40:29:85:d8:bb:45:3a:4a:b5:ca:73:c0:6b:bc:72:8b:d5:
c9:e6:56:55:03:12:d3:3b:73:a5:6b:c2:44:49:37:9c:04:c2:
90:ce:f6:48:bb:3b:80:3c:58:68:99:9f:ca:1f:a5:de:1e:58:
f7:71:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:42:02 2025 by rpki-client