Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f9c8e38-c49e-3599-ae8d-7bfea72b26c2.roa
File: 9f9c8e38-c49e-3599-ae8d-7bfea72b26c2.roa (raw, json)
Hash identifier: nvJ7BLx0PQiq/N0AwCIKAUERE/8kkXC2rWr7wcWMnaw=
Subject key identifier: E6:1A:86:CE:60:BC:9E:C9:B0:A7:75:19:9E:6C:8C:78:0C:81:4E:DF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7E7C94E7337770A67E100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f9c8e38-c49e-3599-ae8d-7bfea72b26c2.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 3848
IP address blocks: 216.208.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:e7:c9:4e:73:37:77:0a:67:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=6d84d37b-068f-4887-b78f-05cc2ad4a8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:df:43:9a:5e:6d:49:58:16:33:4d:ad:1a:
aa:93:0a:bc:46:31:2d:77:5f:fd:50:68:c5:5f:43:
2e:0f:dc:cd:c4:8d:32:94:91:43:97:ab:df:0f:91:
11:1e:5d:57:cc:5e:f4:f4:44:42:5a:5b:72:42:b9:
95:7e:d0:0f:d0:07:0a:a3:ac:be:4d:9c:95:f5:5b:
c8:90:97:cd:75:5c:f0:f5:ba:c8:af:e1:4f:38:0b:
e8:5f:d0:96:29:e9:4e:31:49:ac:51:d4:9e:fb:95:
68:59:d6:63:c1:8e:23:d6:c3:0d:c7:45:b6:d7:d3:
0a:65:b4:4c:40:16:2c:77:1f:d5:f5:e5:99:71:53:
30:70:ee:38:8f:2b:1b:f5:4a:dc:7b:65:41:8d:61:
bc:cb:28:97:bf:64:fd:d4:a7:2c:a9:72:b2:b6:2a:
4c:2e:0b:56:ea:88:32:f2:52:c9:1a:57:54:fa:53:
01:00:b0:02:1a:c7:3e:1e:cd:e1:33:6a:04:41:03:
15:a0:64:c1:d4:15:32:b3:dd:fc:dc:34:f3:45:0e:
25:c9:91:c8:43:60:7f:13:f2:0d:f5:ee:0b:72:dc:
a6:05:d2:67:76:2f:c5:69:c5:35:5a:26:38:04:15:
3c:f5:a6:db:6d:2c:c3:3f:a0:09:34:19:f1:38:b5:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1A:86:CE:60:BC:9E:C9:B0:A7:75:19:9E:6C:8C:78:0C:81:4E:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f9c8e38-c49e-3599-ae8d-7bfea72b26c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:72:d1:e2:2b:76:41:5f:a5:2b:42:23:26:79:79:4f:00:cd:
8d:72:09:dd:a9:3b:bc:3f:3f:f6:97:8b:76:88:54:a8:82:0f:
4b:3f:ea:09:14:1a:d6:81:17:4e:bb:cb:e0:7e:55:63:9c:26:
f8:91:74:25:08:de:b2:c2:5d:9c:29:e0:c7:2e:5d:e3:7d:5e:
67:c9:31:63:4a:a2:12:63:b5:cf:a7:05:21:9f:25:4b:99:d0:
84:30:7a:91:2d:8f:11:98:7e:0b:57:5c:08:dd:a7:2a:1a:f7:
f3:3f:3f:03:30:ef:82:12:58:f3:50:5f:4f:b6:2e:c7:80:76:
f9:da:6e:58:a9:26:9a:d5:66:0e:d7:d3:e1:ea:e9:43:b8:9d:
44:8c:37:ec:25:18:0f:48:2f:0d:38:6a:81:fc:64:9a:b6:68:
59:48:0e:36:52:52:19:6b:3e:cd:f2:1e:30:af:28:d8:84:65:
3f:13:6c:22:cd:56:db:92:b6:c0:5f:42:fe:77:d1:d7:6b:56:
ae:6b:49:b7:c9:a5:36:83:2b:73:36:5d:73:0f:b6:5d:0b:04:
53:ff:0e:a9:bd:26:a4:e9:22:f5:3c:e2:4a:b0:15:8e:80:3a:
53:cf:9d:14:e2:dc:17:3f:40:b2:bf:73:1d:15:1c:a4:25:02:
25:73:3e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:18 2025 by rpki-client