Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac49afd7-f648-3145-8685-46dc5dad71b9.roa
File: ac49afd7-f648-3145-8685-46dc5dad71b9.roa (raw, json)
Hash identifier: ctiDJQ/zMV1yWJjPLeUEhoH0c5GGv39fJBBSz5CU1u4=
Subject key identifier: 0D:A8:01:1F:97:2D:0F:21:95:73:02:DE:C7:00:AD:7A:B5:8F:BA:E2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B58B2D20F65980C8F9BA40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac49afd7-f648-3145-8685-46dc5dad71b9.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 398006
IP address blocks: 142.163.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:8b:2d:20:f6:59:80:c8:f9:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=a36f1470-3bf2-47fd-b617-771d698a7369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:13:4f:cb:2c:2e:b5:81:66:14:aa:b4:fa:
30:48:6b:e6:20:db:6e:20:f9:7f:b0:41:e3:e3:7e:
c8:97:fe:41:d4:aa:1d:a1:b6:d0:8d:3e:8e:81:1d:
dd:75:b4:bb:7f:ac:74:5e:6a:59:1e:ae:6a:49:fb:
04:7b:08:84:55:e3:1e:cb:76:09:8b:f0:9e:b3:94:
e1:52:97:a1:6c:be:2b:f9:ea:0a:d9:c5:a1:e2:ad:
56:8d:4a:39:4a:30:a8:f9:71:8c:2e:b2:64:d7:70:
00:9d:89:1c:16:10:6b:6f:c7:54:b3:d2:7c:35:32:
0f:8d:b1:da:41:03:3b:a9:e1:52:cd:2c:dd:c1:2a:
82:4a:98:36:8f:f0:99:c3:79:16:c5:96:6f:cd:ef:
7e:f1:81:78:51:8a:e5:11:0c:46:fc:0d:1d:4f:c2:
65:14:35:b1:07:33:19:5e:16:a5:e5:5c:4a:58:ff:
94:e0:51:a0:18:6e:36:de:07:17:d4:25:c1:35:d2:
5c:eb:ec:f2:2a:08:09:76:bf:37:ca:90:cf:64:9a:
e3:ae:31:67:2d:fe:80:c6:4e:43:c5:87:16:2c:a9:
16:32:a3:16:43:65:0a:c3:0a:40:29:9c:a1:76:14:
d8:a5:1d:ed:09:a9:aa:c9:14:b0:bb:fb:23:c4:cb:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A8:01:1F:97:2D:0F:21:95:73:02:DE:C7:00:AD:7A:B5:8F:BA:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac49afd7-f648-3145-8685-46dc5dad71b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.163.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:da:5e:4c:3f:8c:44:2f:0c:dd:d8:38:f1:5e:da:5b:6f:f9:
0e:9d:37:73:b6:2f:a3:52:92:4e:86:e1:97:58:10:5b:8b:f4:
bf:46:e2:e5:ee:a1:84:c7:fe:63:77:f3:de:8d:51:c6:de:fa:
cd:63:37:b8:0b:90:3c:3e:69:ff:38:53:cd:e7:7d:e6:d1:3e:
d1:f6:17:4a:df:c4:4a:35:1a:4d:f9:7d:e9:d8:2d:b9:0d:fe:
d2:98:0e:27:87:a5:c1:c2:5e:50:3e:f7:19:58:ad:2e:27:4d:
b8:c6:c6:03:3c:39:d9:e4:fd:31:0f:89:66:6b:b4:f6:7a:87:
e8:58:e1:d1:30:64:ac:fa:ab:d4:14:a7:d1:87:27:8a:7a:c4:
d8:84:a7:e3:54:6e:c1:aa:c8:45:ef:7b:c8:da:79:7a:6b:52:
0e:dc:db:d2:fe:44:d9:0f:32:f4:4a:e6:24:c4:d8:bc:44:73:
63:15:36:d8:8d:ae:91:27:9a:44:19:32:7e:f3:04:21:61:d3:
58:13:19:61:56:82:de:f9:e0:13:1c:4c:69:30:75:cc:9d:49:
89:79:7c:99:a9:07:50:66:6b:bf:cd:69:13:c9:71:3b:5a:a0:
ff:f3:90:92:d3:e6:80:3a:61:37:24:02:28:87:bc:15:b2:e6:
63:3f:50:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:18 2025 by rpki-client