Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa
File: 868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa (raw, json)
Hash identifier: UCA5rK9SQA7u2G1s0Xonamwe46wuCfp62uST4Lht93Q=
Subject key identifier: B9:49:6E:25:35:ED:17:D0:CD:E4:4B:96:46:50:60:43:23:90:99:B9
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584908816A850941E22E151EAD80
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 22606
IP address blocks: 13.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:6a:85:09:41:e2:2e:15:1e:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=28e6ae78-833a-4b29-be0b-47f7940a3694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:f2:ed:19:e5:62:db:71:0d:be:98:fd:44:
cd:30:4d:3d:22:16:99:38:a8:9a:5b:d7:50:9f:37:
77:28:04:82:4c:6f:70:84:ac:52:7a:88:f5:b7:17:
13:0e:ee:18:01:52:0a:15:55:b2:b0:68:9e:02:df:
32:07:6d:49:31:b4:42:a8:71:cf:8a:7e:ab:5d:d4:
61:ac:7e:6a:8c:90:eb:2d:71:f0:12:7b:33:80:f5:
64:c5:ba:7d:e7:81:ef:44:b8:a6:48:27:c1:e5:c0:
7b:fc:4c:93:3f:a2:a3:cc:af:80:1d:99:44:13:ea:
fc:d1:92:00:27:2c:07:dc:a4:40:d8:b0:a7:38:0b:
5e:4a:27:f3:2f:db:87:96:19:79:65:1b:ca:75:71:
25:18:9d:04:93:ad:63:d2:7f:19:bc:c6:19:95:56:
c1:14:5c:5c:85:2f:74:39:53:6b:4d:a7:99:0f:ef:
36:34:c0:93:50:cf:ad:6b:90:af:07:65:47:6d:7f:
bc:11:11:d4:3a:2a:1d:98:f0:ab:0e:e0:c0:e6:34:
8c:1c:88:46:a5:1b:53:f5:06:9b:11:66:73:19:41:
74:27:b8:ab:ff:f7:2f:3b:79:7e:49:23:52:04:96:
d7:41:f4:fb:a4:08:a0:ec:96:78:47:2b:7d:bc:6d:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:49:6E:25:35:ED:17:D0:CD:E4:4B:96:46:50:60:43:23:90:99:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
13.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:63:ad:96:6b:ae:72:ee:89:c4:94:34:e8:fb:34:47:09:79:
8b:b9:a8:aa:10:31:7f:97:70:cf:38:38:be:27:0f:0c:9b:4b:
a1:39:dc:a8:0c:39:8f:76:60:10:d0:63:1d:d6:86:8a:25:92:
83:95:9d:f6:ed:1c:2d:77:74:eb:5a:eb:1e:e4:90:0f:45:ea:
5c:d4:84:5d:4a:27:dd:e2:c9:32:c7:ee:b6:73:06:ca:15:93:
bd:e3:a0:37:8e:a9:cb:80:c2:30:62:56:bc:dd:cd:48:42:0d:
6f:19:26:0e:1f:18:c3:b7:13:29:c6:2a:16:f4:78:4b:98:fa:
2b:7d:45:37:a1:16:ff:86:3f:31:b6:de:8a:68:16:34:85:11:
c1:cb:92:76:0b:03:0c:f9:d6:5d:71:3e:af:e2:f2:4f:fe:2a:
6c:7e:b0:8a:6f:59:32:8f:93:e3:da:0f:d1:aa:cc:3f:ac:07:
81:61:84:b4:f1:3b:d0:9d:11:db:ee:55:6e:29:50:29:02:65:
dc:f5:43:21:fe:44:94:38:af:10:3a:4a:bd:ce:82:85:c3:f4:
19:77:a1:ff:ef:a4:be:95:ee:4e:47:55:80:bd:7b:26:b3:0c:
e4:45:7a:70:b3:c4:8b:7c:9e:06:5f:97:64:a2:28:69:40:d7:
eb:dd:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:58 2025 by rpki-client