Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/e924a083-9d0a-3903-9bf9-c5952d54abc2.roa
File: e924a083-9d0a-3903-9bf9-c5952d54abc2.roa (raw, json)
Hash identifier: b4a0UAgYFx+CwMMeuqmXwV8b7w3q9H8Z3lIweJowk3A=
Subject key identifier: 13:6A:B9:DE:01:6E:86:51:87:95:63:B2:BC:84:80:CC:E2:CC:8F:34
Certificate issuer: /CN=7334a22a-f222-4457-889f-5478966ecf96
Certificate serial: 010D0C9F432858487755CDCF97B48F45D29D5F80
Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/e924a083-9d0a-3903-9bf9-c5952d54abc2.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 11805
IP address blocks: 208.91.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:cd:cf:97:b4:8f:45:d2:9d:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=49c7114b-f498-4434-a803-f87b902e90b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:86:2c:3d:8f:cf:33:62:4f:cb:6f:cd:d4:
6f:37:4f:72:a2:88:36:50:3e:22:01:dc:78:bf:07:
72:b4:d9:41:bf:d2:20:e7:32:2f:9e:13:31:f2:f5:
79:09:9a:7b:c6:a4:19:a1:ce:81:7d:8a:43:10:5a:
85:a1:fa:2f:16:b1:7f:89:5b:ef:12:5f:cc:f1:46:
48:90:1f:f8:ed:7a:e7:0c:83:db:e6:74:a4:27:73:
a1:df:81:1e:c1:b8:52:6e:b0:70:3f:a9:84:19:ad:
44:77:e2:65:00:b3:bc:38:35:b6:7e:67:cf:3d:6f:
4e:66:4b:73:21:9e:0b:ea:8c:68:db:64:14:15:6e:
0d:eb:34:46:1b:ed:b4:b2:8f:bf:bf:fa:0b:b2:a3:
a3:e1:16:ef:b6:6e:1e:96:a7:b7:c7:d5:b6:6c:a5:
03:b0:45:6f:db:43:2d:4a:1f:ff:83:21:c1:a3:ea:
28:61:17:38:82:a2:34:72:9a:1c:0b:da:03:87:e4:
0a:f7:e0:b1:0a:cb:8e:67:e7:fe:31:f9:b8:72:b6:
e9:00:31:a4:56:e4:7d:55:f2:52:54:9d:c2:02:24:
8e:8f:ba:9c:b3:f4:1d:cb:7d:91:3c:f0:30:53:4d:
e6:72:ac:69:0c:ec:c0:13:44:7a:47:e6:a7:e5:31:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:B9:DE:01:6E:86:51:87:95:63:B2:BC:84:80:CC:E2:CC:8F:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/e924a083-9d0a-3903-9bf9-c5952d54abc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl
X509v3 Authority Key Identifier:
keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
sbgp-ipAddrBlock: critical
IPv4:
208.91.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:19:30:5d:eb:6a:e6:db:86:92:9b:3c:9a:ed:31:a7:09:4e:
84:8b:9c:b1:c9:b3:d8:98:3a:77:5c:c9:1a:69:ed:c6:08:87:
3a:e6:75:a5:d7:9e:c5:d8:86:b2:fa:3c:3d:cd:b4:f9:4b:fa:
ca:c3:9e:43:0a:a7:cf:82:5d:cf:54:ae:f2:4b:a3:29:98:1d:
24:1a:bd:f1:f2:0c:e9:c7:62:5b:aa:a2:3a:29:64:80:81:eb:
c5:53:21:83:ee:fa:92:ec:49:31:9a:62:4b:93:93:79:51:81:
73:52:ae:b9:b1:ee:ca:3a:f2:e1:45:17:5f:a0:87:e3:f8:88:
44:08:ad:ec:54:a8:96:a9:f2:0b:aa:84:06:d3:25:7e:c7:97:
53:8e:55:58:80:35:ef:bc:b4:7a:94:ed:74:df:15:4d:1c:a9:
da:85:40:01:66:12:b7:50:25:7b:38:7c:04:f2:f8:aa:8a:3c:
92:e5:36:8c:b5:7f:e9:7e:76:3a:ee:14:3e:45:b8:53:ba:5a:
95:2c:50:48:38:7e:cd:3d:6f:b9:ac:d4:26:ec:04:d6:eb:b1:
5d:c8:f5:ca:32:47:ad:fc:49:c1:c3:c2:95:cf:a9:4f:58:2e:
23:de:6f:76:f6:f2:a0:6e:e1:bc:7d:6c:1b:b0:f2:b3:d5:60:
9a:bf:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:22:14 2025 by rpki-client