Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa
File: 72ff3015-9382-36f0-b469-eaf2cf7cea67.roa (raw, json)
Hash identifier: 6oKk6SUf81uN5A2KwXuZUO4Bm96Ohg8jX3pahmKYskk=
Subject key identifier: E9:C4:87:28:CB:6A:41:43:95:7B:D5:2E:4B:66:97:14:D5:17:74:B5
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858491ED6ED2B89C16B8A38A53E80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16839
IP address blocks: 199.91.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:ed:2b:89:c1:6b:8a:38:a5:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=a06294d3-272a-4e87-8864-3a28c968651f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:c2:d4:8c:8c:18:e7:36:06:7b:09:5a:0c:
6c:92:92:a5:7d:43:eb:38:4f:f2:ec:47:8d:a5:dc:
89:e9:cc:95:27:eb:7e:04:d7:70:96:fb:a9:6f:5b:
56:eb:0a:57:3b:7b:be:3a:8e:30:f3:61:b3:bb:e1:
a1:7e:b6:53:a9:3d:00:b3:48:22:c9:93:bd:09:c7:
c4:f6:a5:83:7a:7a:ae:7e:a1:2d:69:fc:18:46:f9:
44:99:35:72:da:02:46:57:7d:7b:00:37:77:f0:95:
46:97:66:d8:33:6f:27:37:c2:6b:2c:03:86:3c:a0:
6c:03:83:83:de:44:48:63:14:30:6f:e1:c8:4e:21:
c2:66:65:6e:87:8a:3e:59:2f:6a:c3:f6:ab:c0:aa:
12:e4:43:9f:b3:c2:e8:15:d7:7e:c2:2f:ae:d1:91:
b7:49:c5:8d:9b:0d:39:a7:b7:d0:33:a5:13:cc:42:
84:ad:a9:ef:ca:17:90:4e:a6:2e:06:50:60:2d:20:
fa:33:fa:06:fc:85:e4:8a:d5:16:eb:eb:b4:58:52:
10:93:16:1b:d8:9a:0e:f9:52:42:92:f5:10:5c:00:
f0:5e:c5:48:09:5a:42:ef:22:54:a9:ba:31:d6:b8:
f5:19:a5:8d:e8:29:be:0d:15:1c:f0:1f:44:bf:6a:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:87:28:CB:6A:41:43:95:7B:D5:2E:4B:66:97:14:D5:17:74:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:2e:a6:e2:f8:9a:0a:30:a7:0d:7f:f3:d6:83:86:bb:53:77:
92:9c:a3:0a:3f:30:d2:55:ad:e8:31:b0:09:74:43:d3:24:7a:
b0:58:84:bc:3a:7a:94:0c:9b:a5:b9:2f:14:dd:6d:d6:15:5c:
86:79:53:32:66:57:82:d9:5f:dc:7a:11:63:5f:5b:14:10:79:
f4:65:f4:01:3f:dd:c0:99:e7:5f:73:2b:bd:a2:28:41:f8:90:
28:f3:3c:77:04:ec:e2:40:53:c4:af:c5:ef:a5:f0:15:56:e6:
d9:f6:a0:aa:ec:da:86:d4:62:62:b4:02:03:84:e2:a5:a4:f1:
5c:49:4e:e8:92:c1:7b:ac:b9:37:47:8b:93:54:97:9a:ec:e3:
10:c2:82:44:b5:83:b6:21:24:f4:c2:3b:fa:a8:34:91:c6:fb:
7d:bf:03:2a:fa:32:4a:0a:2f:14:22:f7:2f:5d:41:4f:36:b9:
37:5a:0a:ba:95:10:89:c2:f8:5a:a3:de:7e:15:a7:1b:85:88:
fb:41:11:09:45:8a:12:0f:08:30:05:c9:de:3b:fa:1c:8f:02:
64:ad:fb:4e:39:ec:a1:93:4e:fa:68:89:f3:34:2d:c5:06:c2:
a1:fa:c3:db:d4:e2:cd:4c:c6:3b:e3:25:ea:7b:a7:63:c4:95:
eb:4c:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:21:15 2025 by rpki-client