Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
File: 23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa (raw, json)
Hash identifier: 2ouVJkmCOjzOtvRAHS5T8dYel/T371fjOKwIVwjAUnc=
Subject key identifier: 7D:7B:16:04:FF:0F:C4:00:25:A2:09:4D:07:36:A7:43:43:2A:3F:72
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F432858483F80232237B5119C8FB68F30
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 14618
IP address blocks: 85.113.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:23:22:37:b5:11:9c:8f:b6:8f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=a3c28dd4-8ca1-4753-b563-f8112d50ed3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:c2:e5:6d:a3:f4:27:73:f5:e4:94:a2:c5:
87:a4:c0:4c:bc:a3:2a:92:c4:76:3c:85:19:42:9e:
9f:94:2e:6a:1c:04:f5:1f:51:ce:d3:6a:80:df:55:
10:3e:a9:ba:fd:3d:4d:ee:31:cd:07:7d:cd:6f:b0:
1a:e0:e1:7a:59:52:1c:67:af:7a:d6:a8:12:15:1a:
00:34:8c:0b:d2:fb:4f:dd:d9:99:46:ea:11:d0:2c:
9b:e8:dd:f1:ea:5d:86:ea:b0:07:22:aa:37:30:d9:
02:6f:15:c9:61:0b:9b:ca:e4:75:14:43:51:a5:9d:
48:8b:38:48:b4:39:04:69:9b:55:97:34:1e:b4:be:
35:e9:85:6f:89:20:cb:85:b3:22:42:8b:6d:42:b9:
1b:54:c3:39:40:a1:0c:7c:79:08:ba:5d:5d:da:81:
75:69:2a:bd:b5:3e:40:2d:c8:5a:50:5c:17:6c:c4:
23:7a:11:26:43:31:1a:f1:94:11:9f:ae:5d:cf:85:
3a:b3:1c:f6:ba:47:62:94:eb:ad:bb:a4:68:ac:e0:
2b:3b:ef:b7:ae:e7:27:57:37:b4:42:29:65:0c:1f:
f1:ba:be:61:49:3a:4d:90:62:3f:ea:29:60:8c:9b:
ae:62:77:ba:d3:13:77:01:98:04:35:cf:16:0e:e1:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:16:04:FF:0F:C4:00:25:A2:09:4D:07:36:A7:43:43:2A:3F:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
85.113.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:c9:f1:ed:a6:5e:1a:ad:82:ba:c0:ed:c0:36:b0:b2:0a:b3:
55:33:43:c1:50:b7:12:62:9e:fb:c9:3f:10:c2:86:fb:10:2a:
9e:70:b3:4c:1e:eb:9b:94:d1:b0:1d:58:c8:68:38:4f:24:15:
90:d7:f4:f3:f8:41:e3:d3:4f:42:58:d6:a2:f0:75:9a:b6:23:
24:00:0d:71:76:07:e4:0f:82:a5:81:8c:49:f1:d5:67:68:74:
9c:c6:a3:1f:77:c6:fe:5c:ac:b0:62:fe:f7:23:dd:ef:37:7a:
04:32:8a:d3:5d:b4:43:f8:17:fc:95:f8:83:ab:96:03:2f:98:
af:b1:60:63:e1:ba:9f:38:f8:d6:e6:83:d4:94:90:c7:39:34:
bc:b7:2f:26:8f:02:52:54:14:4d:39:94:05:49:a9:76:1a:18:
4f:9a:2a:1a:4d:21:ca:6c:72:7b:c4:17:db:04:58:d4:b7:db:
cd:40:42:62:a3:99:73:f5:9d:71:e3:9f:33:bf:de:db:b4:0c:
fb:7b:0b:e9:9a:36:ac:fc:19:b0:b3:bd:45:f5:91:8f:ef:b1:
b6:49:d2:63:ae:55:d2:21:7e:1c:2a:12:28:dc:c5:93:cf:47:
fd:dd:e5:68:2d:9b:5f:0c:78:55:23:6b:86:21:e7:6f:81:f3:
55:c4:a2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:23 2025 by rpki-client