Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e/ac9083e8-effa-3869-b09f-8574a01124dc.roa
File: ac9083e8-effa-3869-b09f-8574a01124dc.roa (raw, json)
Hash identifier: EauHoE/KS5E+vvS30PiHlKtOIGZBWSdMcFhD38HgOfw=
Subject key identifier: 2E:BF:EE:A0:EF:E3:F4:92:BF:10:8F:15:BD:6D:C5:44:D6:58:6B:0D
Certificate issuer: /CN=9b489b35-c88a-4dd6-a892-ed910b09832e
Certificate serial: 010D0C9F43285848A830A3A4673B4983103BFDA0
Authority key identifier: 27:BD:C6:6E:EE:6C:7A:A0:19:88:CD:7B:34:94:8A:63:9A:E4:92:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e/ac9083e8-effa-3869-b09f-8574a01124dc.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 16509
IP address blocks: 192.207.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:a3:a4:67:3b:49:83:10:3b:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b489b35-c88a-4dd6-a892-ed910b09832e
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=5d780559-bd60-47ad-b641-fbe2d54b3360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:42:10:3f:1b:d2:e3:64:ec:fc:f7:59:43:
47:f2:90:36:a2:66:a5:86:76:b1:15:15:cc:a2:ac:
42:13:43:13:12:96:68:c9:53:a2:8b:26:c3:c1:01:
54:05:1c:66:52:18:cc:09:2e:e0:14:64:96:ee:53:
9c:ee:ad:7c:68:61:4b:02:14:57:b2:c9:48:e4:b8:
e6:b1:7d:cf:83:f2:ba:a7:a1:c1:e4:ff:af:10:c1:
80:0a:3f:e5:e0:6c:e9:5b:91:d5:60:5d:69:ab:20:
67:b5:17:25:bc:34:ba:6a:bb:9c:07:e0:72:2d:ae:
74:09:24:70:78:b4:54:e2:6f:bc:01:05:6b:3d:3d:
a5:4b:03:79:4b:81:b1:f1:18:3a:cb:ac:11:f6:5b:
c1:57:0f:e1:56:02:96:c2:02:3b:fa:13:a3:90:60:
fe:f6:10:63:5a:74:6c:c6:3c:e6:94:5d:e3:f7:81:
86:e9:d0:70:8a:97:cd:84:fe:32:7e:5f:ac:f8:03:
f4:d4:c1:d1:9d:e4:ce:6b:71:a4:4d:56:e4:2c:da:
ca:eb:53:d4:5a:ca:cf:59:6a:36:71:be:1d:35:8e:
36:b2:87:25:2e:ac:ff:12:23:85:0d:c4:e0:c5:68:
f9:5d:bd:4d:e8:e3:5e:e3:4b:78:0f:35:5e:8a:d4:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:EE:A0:EF:E3:F4:92:BF:10:8F:15:BD:6D:C5:44:D6:58:6B:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e/ac9083e8-effa-3869-b09f-8574a01124dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e/9b489b35-c88a-4dd6-a892-ed910b09832e.crl
X509v3 Authority Key Identifier:
keyid:27:BD:C6:6E:EE:6C:7A:A0:19:88:CD:7B:34:94:8A:63:9A:E4:92:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.207.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:fe:ff:88:d0:b7:1f:6a:d9:5b:45:f6:84:c2:8c:cf:5d:26:
3d:69:83:a2:2a:a6:39:79:d0:6a:2c:a6:11:cf:60:a1:69:77:
68:ec:a8:09:4a:0a:6f:d5:6f:38:96:c9:ff:11:58:fe:c1:fc:
b9:58:a0:cd:77:cd:f5:80:f6:d6:b4:88:0e:13:c7:d3:85:3b:
55:1b:2f:cd:51:4a:cb:e4:a4:7a:67:62:f3:36:58:d4:59:b2:
43:23:f0:45:48:ab:47:f4:13:a6:7e:8b:38:fb:fe:9a:29:2b:
f3:f7:12:90:38:e1:28:78:5a:0e:8c:32:13:d7:7a:e1:c3:2e:
86:ae:a2:50:ef:23:fe:d4:4b:25:e4:b3:d9:ed:d4:78:2d:a2:
91:55:7a:bf:24:08:b0:99:6f:09:82:2f:bf:6e:ac:0b:db:ba:
b5:88:ae:6d:46:9d:85:4c:c2:16:c2:ee:58:3d:1f:e8:2d:64:
3c:59:0a:f6:6f:20:71:d9:f2:c9:c9:0d:34:ba:44:a5:9d:c3:
1a:91:0d:9a:b5:bf:46:12:60:f2:d1:f0:cd:ba:49:2f:ca:9e:
5c:c6:ae:13:9a:cb:92:df:5e:98:57:0a:57:e9:b4:07:b0:d6:
75:6d:fe:73:17:3d:ad:c6:51:32:ea:f8:b4:ef:72:ed:f4:96:
d1:52:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:06 2025 by rpki-client