Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9fab07aa-5f72-3539-9e5e-d0a7c8179426.roa
File: 9fab07aa-5f72-3539-9e5e-d0a7c8179426.roa (raw, json)
Hash identifier: BypnDugwgRJ/FxpVcBv9TZxDCM8zLdmwhojaZiNzKdI=
Subject key identifier: EA:62:50:44:6D:22:78:1F:A8:BB:69:F2:15:95:98:69:D5:BC:26:1A
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848DD3BAAB2FCE2AD2C8821FDC0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9fab07aa-5f72-3539-9e5e-d0a7c8179426.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 9255
IP address blocks: 169.224.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:aa:b2:fc:e2:ad:2c:88:21:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=6d931e7d-590e-4ff2-894c-dd61da619465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:69:e2:b2:01:d1:e7:23:f4:3e:57:ec:0a:b3:
f7:c6:78:b1:9a:6b:6f:a4:09:b2:51:64:89:18:43:
97:66:80:72:be:54:69:d7:d6:d1:5b:75:1d:2d:5f:
e6:36:1a:17:c0:11:41:21:16:ec:70:da:09:5c:74:
1a:ac:5b:b2:de:e4:29:4d:5f:17:80:8f:6d:de:6a:
53:e5:e6:c0:10:2d:c1:1a:d6:d7:88:8d:b9:43:19:
e1:8c:ca:40:cc:1c:ff:b8:a7:7c:56:8b:27:3f:5c:
9a:d8:41:97:2d:c3:cd:1a:27:33:be:4b:56:82:da:
fd:b6:eb:99:4c:00:39:75:2d:6b:51:b3:a9:29:6d:
bb:8a:bd:71:e8:31:d7:7c:2f:06:f0:de:a2:d0:bd:
4e:58:2e:18:1d:c9:c1:9a:19:fc:1e:cb:25:1b:f4:
96:cc:f5:68:6d:63:3c:38:54:6f:de:ac:88:2a:be:
a4:82:13:1f:23:8f:46:a0:04:5a:c0:b1:9e:9c:a0:
1d:12:ef:ad:91:39:81:52:ce:aa:d1:f6:c3:74:6a:
ed:87:ce:48:0b:9c:12:05:f4:3c:01:22:6c:c2:5e:
fd:91:3d:59:40:4b:23:50:3a:11:b5:67:a8:c9:e5:
5b:c6:3e:9a:d4:0d:b4:63:cb:da:77:fd:0f:1e:fc:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:50:44:6D:22:78:1F:A8:BB:69:F2:15:95:98:69:D5:BC:26:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9fab07aa-5f72-3539-9e5e-d0a7c8179426.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
169.224.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:d5:9e:32:b6:f6:a2:b2:6f:5f:7f:69:25:48:2a:77:37:01:
e4:af:ce:ec:f8:d3:31:8f:29:cf:a3:73:45:b8:1b:af:0e:ad:
6f:a0:b4:c0:aa:d6:ca:c0:45:c1:09:3f:17:f9:d1:4a:04:9b:
22:8d:1d:30:9c:35:15:88:6b:99:99:b7:0c:66:0d:53:93:c3:
ed:53:37:47:b1:9c:10:97:5d:37:80:2c:a7:8d:2f:af:31:1a:
86:be:dc:74:ad:c7:a7:82:64:e8:05:4d:80:0c:37:ca:7f:d4:
40:62:94:e2:10:59:dc:11:e2:87:b2:3e:18:85:42:ba:c7:89:
a4:c2:7d:49:ff:36:9c:c3:84:5d:6d:e8:f1:9d:8b:2a:a8:82:
d1:a3:5e:5c:ef:d5:f1:a4:07:41:7d:34:d4:46:02:e5:32:85:
7d:b3:87:9b:53:4f:07:0b:74:5d:dc:f3:4f:89:80:13:d1:0f:
0e:28:19:b8:04:97:13:57:b8:ca:f3:41:75:61:31:cf:d6:70:
82:a9:b0:03:97:68:9b:d2:67:86:5e:69:a5:14:16:83:b3:a7:
62:d0:bb:43:14:27:ea:c1:49:07:5e:b2:ce:d6:8b:b3:3d:dc:
44:49:df:fb:05:c6:b7:1b:f8:12:ed:c9:b4:d0:d9:27:53:bf:
75:5e:d7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:35 2025 by rpki-client