Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6893392e-52d2-321a-b6f3-b1dd2600e433.roa
File: 6893392e-52d2-321a-b6f3-b1dd2600e433.roa (raw, json)
Hash identifier: +j/eFzTvkwDCcE1lvGkVBkcEUITrz6vy0216AeSrSmQ=
Subject key identifier: 8C:3A:84:C3:94:E3:48:96:E9:7A:18:60:AF:14:63:86:53:F3:0E:3E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5A6CAAF295136EE402A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6893392e-52d2-321a-b6f3-b1dd2600e433.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 159.2.0.0/16 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:a6:ca:af:29:51:36:ee:40:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=4cde2e78-0c3a-4c91-98b5-5efba417dd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:4b:75:24:43:11:a4:22:8e:9b:8d:52:26:
29:aa:f4:ac:cb:18:99:58:7f:be:cd:10:e0:77:eb:
a8:f3:f1:9c:73:b9:14:22:1c:a6:90:64:7a:cc:f9:
f3:22:00:34:88:d9:4d:bb:0e:14:d7:4b:a8:4a:0a:
d5:19:d3:ec:9b:58:9e:bf:24:f4:bb:e7:94:f1:d7:
5e:aa:56:77:66:8d:25:7c:52:ec:d4:a4:46:c2:f6:
fe:59:40:52:d4:c3:bb:15:f5:b4:f1:65:4b:d9:1e:
3c:94:93:b8:01:61:22:bf:e8:ba:33:60:36:58:c0:
05:88:08:12:86:4f:5f:8b:7e:17:03:a6:3d:0f:7b:
25:1d:78:7b:ff:db:48:15:9b:42:15:2e:80:97:5b:
64:b3:57:fd:fe:d2:c8:f8:85:75:c0:9d:21:8a:bf:
e6:0a:f7:d7:49:66:37:1e:99:6a:a2:b2:1b:e9:24:
cf:75:99:0b:59:ee:2d:9c:cd:b2:f0:a4:fd:70:75:
08:52:71:95:72:74:86:0b:08:1a:31:d0:50:67:77:
0b:a2:81:3d:6d:18:7d:7f:a0:7d:f1:0b:b4:5a:46:
87:24:7e:f5:51:22:e3:8d:83:14:34:b2:28:4d:f1:
1d:ac:3a:17:15:7a:e7:dc:b5:5c:57:59:6b:06:38:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:84:C3:94:E3:48:96:E9:7A:18:60:AF:14:63:86:53:F3:0E:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6893392e-52d2-321a-b6f3-b1dd2600e433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
159.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:a1:14:8e:5c:b1:02:0a:ee:93:41:fc:61:4b:4d:43:ce:b4:
17:72:28:4c:30:e7:ed:71:a7:cc:1c:30:a7:9d:e2:1c:28:e9:
8b:be:f8:a2:d3:95:61:af:2d:6f:b1:69:61:03:04:d0:80:03:
0f:5b:79:30:b6:e0:61:55:75:fe:72:31:17:76:80:a9:b8:b4:
07:fc:65:61:b9:0f:5b:66:e0:c8:6e:ad:47:5a:b8:28:ed:51:
78:b5:2b:e8:91:e4:63:91:19:5f:84:29:0e:0d:7c:02:ec:c7:
25:be:a1:10:8b:5f:b7:e1:fc:ee:7d:df:cc:27:03:88:66:d3:
b9:64:21:03:a6:de:89:59:2f:28:39:1f:81:b9:78:57:8b:2e:
13:3c:21:a2:22:31:d0:b1:86:a1:d9:8d:79:d5:f7:6d:3d:a9:
1e:57:5e:e4:2d:fc:03:be:83:9e:ee:54:56:e7:b3:ff:98:fb:
5d:94:e2:3d:67:5f:60:50:f0:ae:d3:ba:2f:6b:cb:16:8e:93:
74:b1:86:44:c9:a5:7c:34:df:75:71:ce:02:40:27:92:0e:14:
d9:bc:f8:c5:5c:31:17:b8:9a:0a:02:7e:92:37:cc:d5:f0:da:
71:75:00:df:fb:cf:ad:8f:ce:66:e9:8e:10:b0:26:6c:50:59:
a6:40:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:35 2025 by rpki-client