Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ed9df1e0-938c-34b4-9bcf-a4169801df76.roa
File: ed9df1e0-938c-34b4-9bcf-a4169801df76.roa (raw, json)
Hash identifier: 32k2Zqkm2NjdkoS3oJr7gc6NeO2rvr4Daw7EJuYPMfk=
Subject key identifier: 35:5F:C3:12:32:7A:B3:97:33:A2:80:3D:B1:51:34:26:61:67:D3:4B
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F43285849244E7DF25B695AB74CF31F80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ed9df1e0-938c-34b4-9bcf-a4169801df76.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 14061
IP address blocks: 142.93.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7d:f2:5b:69:5a:b7:4c:f3:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=a064d04f-d6b5-4cff-9b4e-17cd811d7e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:27:39:bd:93:9d:d2:64:df:7e:68:86:a8:
65:f1:a4:dd:1d:8d:f4:9c:bd:07:f8:4d:46:25:dd:
9b:be:fe:9b:23:ee:dc:8e:53:eb:74:7c:d2:1c:6d:
a2:bc:77:85:e2:cd:e8:96:18:6d:94:32:e7:4b:ec:
ae:4e:67:4e:3b:c4:ba:6e:70:7d:16:6a:c9:42:a3:
13:af:f9:82:a8:98:ca:94:3b:0f:36:08:8c:97:30:
c8:96:04:dd:3a:eb:ff:c1:5e:e7:09:34:28:48:3d:
51:6a:37:bf:c4:55:24:26:d6:c8:aa:b1:3c:19:28:
6d:60:89:f3:54:b8:81:a2:30:26:89:2a:fd:bc:04:
0f:8a:5c:92:74:8e:ee:fd:af:1d:6d:6d:dc:93:79:
62:18:d7:8c:0c:47:f3:9b:f5:35:1e:03:9e:b1:ed:
c2:5c:26:d5:63:ce:c0:cc:71:89:0d:da:5d:2b:e3:
0f:45:5d:23:19:9a:87:27:87:ba:83:0a:06:28:f2:
17:e2:a1:c4:16:b6:cd:8b:57:01:54:61:f7:8d:76:
7c:fb:88:9f:a4:23:48:df:ec:46:4a:c7:e0:94:35:
6c:6f:13:16:04:af:53:9c:2c:f7:b1:d8:02:dc:f3:
48:0c:d0:b0:72:94:a6:83:c4:8e:b3:84:5e:b9:4f:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:C3:12:32:7A:B3:97:33:A2:80:3D:B1:51:34:26:61:67:D3:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ed9df1e0-938c-34b4-9bcf-a4169801df76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
142.93.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:8a:c1:b6:76:d0:0d:20:ba:0b:f3:61:82:31:64:66:41:85:
54:b4:1c:2e:e8:6f:9c:ed:9c:6c:bc:3b:c9:3c:f4:22:ff:62:
84:df:15:37:a2:d3:e5:07:c3:2b:12:13:f5:36:f2:e9:c3:4e:
bf:9c:aa:1e:dd:28:ef:fa:e6:fc:73:e2:e7:09:63:90:0b:3a:
5f:22:ff:8a:11:2f:33:9b:23:d3:a7:6a:92:f5:42:d9:5b:49:
49:2c:d2:65:99:f9:38:80:94:0d:9c:48:c7:bf:6c:f8:40:7b:
2f:0e:bd:af:42:a3:65:84:73:01:9c:f4:bb:4a:05:85:72:0a:
40:50:7b:fc:06:fe:ab:01:f5:8f:0e:e9:7a:7c:0f:21:91:52:
c9:69:bf:20:a8:d6:7f:c8:95:09:5e:5f:47:a5:3f:c6:e1:e0:
0a:4e:53:16:0b:40:b1:9b:2c:94:2b:0c:ca:71:70:ac:14:8f:
d9:84:4c:3e:24:47:1b:e9:d4:f5:1c:43:ed:96:2d:7d:bc:da:
32:8e:cf:20:9f:b7:9b:2d:fa:a8:b0:29:d7:f8:b8:51:92:c6:
9f:28:7c:9d:e4:61:aa:17:f0:ae:cd:82:56:28:b2:b8:58:5f:
b8:e0:ba:be:79:c2:6e:92:6e:59:e0:d9:a7:7b:17:e1:3b:f8:
7f:f4:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:48 2025 by rpki-client