Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4509c257-d356-3468-8d2f-84e2bb161f00.roa
File: 4509c257-d356-3468-8d2f-84e2bb161f00.roa (raw, json)
Hash identifier: g7kDdx9lspBPEfXYQIyDu4ePIVXy++gz9MVVbRiDIJY=
Subject key identifier: B4:40:E0:9E:57:F6:E0:B0:32:58:48:19:FC:1F:AF:B5:0A:B0:61:F1
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CFD79D20882758440580
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4509c257-d356-3468-8d2f-84e2bb161f00.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 167.94.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:cf:d7:9d:20:88:27:58:44:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=6d0e4251-a571-411e-a0e8-e8824ed671af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:10:85:28:be:24:50:b8:42:b2:2b:b0:5a:7b:
ed:b6:b6:2e:fc:5f:89:fa:d6:f5:be:34:06:26:c7:
b0:91:29:68:d2:65:20:2d:85:56:b3:2f:73:40:47:
40:25:56:d0:10:81:e0:0e:d4:c7:62:11:fe:2a:9b:
34:db:dc:00:d6:32:9b:da:1a:d9:00:8e:7f:43:b8:
b4:c7:19:f7:4c:1d:d6:3c:27:23:3a:b9:12:cc:16:
4e:fd:2d:6f:ff:fc:64:f8:08:d5:d4:99:19:ff:8d:
1c:f3:6a:ec:d4:8e:bd:8d:0e:a1:9e:56:db:eb:15:
38:9d:72:15:53:d1:1b:1d:05:2f:8f:4c:83:5b:de:
b7:cb:4d:bf:5c:dd:1c:56:0c:22:27:a6:0d:13:db:
30:02:2d:7e:20:f1:da:d0:91:f4:db:d5:04:37:de:
dc:3b:c9:7d:74:b7:d4:f7:6e:b9:f6:47:ab:77:d7:
42:13:35:51:42:e8:b3:4d:b1:5f:b6:eb:26:ed:72:
96:8f:fa:33:47:f9:c4:d0:c6:7b:1d:7e:1c:17:d7:
bc:9d:8f:25:d2:52:28:5d:9f:3a:a9:c8:bc:d6:09:
14:8b:bb:1a:10:72:46:5b:0f:41:84:73:dc:f2:b1:
42:f5:d6:3a:48:4d:5a:3f:63:5e:ea:b4:55:de:bb:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:40:E0:9E:57:F6:E0:B0:32:58:48:19:FC:1F:AF:B5:0A:B0:61:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4509c257-d356-3468-8d2f-84e2bb161f00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
167.94.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:8b:c4:9d:c0:9a:0f:8d:11:f9:c5:4d:a7:03:12:3a:87:b9:
ec:23:31:43:d2:0d:c1:50:2f:8c:c5:86:09:3f:3d:d5:0d:ba:
fa:cb:dd:5e:83:9e:0b:5c:97:74:a3:b6:34:a4:56:49:c0:a8:
5f:b6:32:70:ee:34:1b:ee:b3:d1:2b:7f:ac:27:f2:0b:5b:23:
21:08:4f:5a:4a:9c:54:76:c6:3d:b0:8f:a4:89:86:7e:7c:e5:
d6:73:75:93:eb:14:ce:11:04:d4:82:f9:76:71:31:0c:01:99:
3f:cb:58:8c:87:5c:fa:2b:0d:f5:9c:da:e0:71:79:d1:14:30:
dd:e8:e6:da:cd:16:c5:57:b6:ef:73:33:ad:54:7a:ff:7d:d9:
4a:1d:48:b6:14:8e:b1:cb:e6:2b:62:42:8f:0c:f7:3a:84:ca:
3f:fa:9c:c0:a0:9e:4f:56:64:b4:9f:0a:3a:4d:11:bd:ee:ef:
06:26:7b:d2:68:08:9b:99:e5:bd:25:c0:ab:dc:00:e8:b0:b4:
21:c0:92:56:38:26:41:4d:95:a1:83:c9:0d:85:d2:2f:77:81:
5f:4f:3b:0a:e2:2b:68:41:0a:78:de:a8:72:df:88:a8:60:b3:
39:1c:19:97:c5:4d:c0:0b:57:29:90:c2:b4:ee:b5:a1:83:02:
86:72:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:52 2025 by rpki-client