Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/873b6afa-4551-35e3-9d99-be15cea58767.roa
File: 873b6afa-4551-35e3-9d99-be15cea58767.roa (raw, json)
Hash identifier: CPZV+OSF3Mh/rGyTKPg6jyvr6WKXTdSwzULNdYgMe5o=
Subject key identifier: 85:D3:0D:CD:21:5D:36:02:3F:AE:C2:DE:69:AF:EC:D6:02:A7:FA:91
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858487EC56DE975A45225B8270400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/873b6afa-4551-35e3-9d99-be15cea58767.roa
Signing time: Fri 10 Jan 2025 05:56:32 +0000
ROA not before: Fri 10 Jan 2025 05:56:32 +0000
ROA not after: Thu 10 Apr 2025 04:56:32 +0000
asID: 401149
IP address blocks: 24.249.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:c5:6d:e9:75:a4:52:25:b8:27:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jan 10 05:56:32 2025 GMT
Not After : Apr 10 04:56:32 2025 GMT
Subject: CN=05ff61ea-c8c7-4145-94c0-613bb2f0b59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:dd:90:67:48:a2:e9:22:90:71:f0:d6:17:
ad:04:54:e8:d8:0c:80:61:42:f9:2b:4c:a2:12:38:
47:5c:bf:80:8a:f7:d2:09:b8:5e:05:f4:bd:12:24:
5b:dc:66:ab:67:d4:59:f3:12:ea:55:07:1f:fe:de:
a3:01:c8:7b:72:60:8d:2b:58:65:db:fc:a1:e8:9f:
50:0e:4e:bd:b4:ad:f7:56:66:fb:66:64:88:bd:c4:
57:20:34:81:1c:7f:a0:69:a6:11:bd:53:39:98:6d:
34:a2:1c:8c:23:51:07:0e:51:eb:14:dd:5c:a4:23:
47:ef:e8:f4:5f:ad:22:6b:41:e7:29:14:17:45:b3:
ab:bf:7b:25:a4:e0:8b:6b:b0:16:85:e8:07:51:f7:
de:47:fd:15:6e:6a:bc:42:27:c4:73:cf:e4:25:66:
9f:22:ce:8f:c2:df:a8:51:1f:1c:c9:58:42:79:d9:
59:2c:e4:3a:01:ab:cd:fe:86:9b:f4:43:14:82:8e:
12:58:d4:2c:3b:e7:2e:70:28:2f:de:ed:40:a2:32:
8e:07:03:f4:8c:0f:6c:c1:8d:f8:8e:bc:b9:ab:59:
15:3c:eb:e8:4a:18:8f:e3:2f:6e:6d:f6:03:58:ea:
7e:e6:18:49:e2:f0:c7:bd:d6:1b:f8:55:7a:9a:d1:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D3:0D:CD:21:5D:36:02:3F:AE:C2:DE:69:AF:EC:D6:02:A7:FA:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/873b6afa-4551-35e3-9d99-be15cea58767.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.249.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:37:18:81:65:b1:c7:40:47:53:a7:a2:f1:6f:b4:7a:9c:7a:
20:9c:e2:d5:0c:f4:4d:df:34:1c:3e:70:3c:9e:f9:8a:d7:68:
b1:ef:51:06:7b:a7:bc:13:e6:c4:96:e1:b3:77:18:1e:2b:eb:
d0:04:ab:3b:91:21:2b:9e:8e:e2:02:89:ce:27:ab:24:95:6e:
54:59:f4:b0:5e:6f:e4:04:32:de:e4:5a:7f:ce:df:1f:f2:c6:
d2:bc:47:be:e7:5b:ff:09:c7:c7:8d:22:72:a7:45:8d:24:9b:
69:d0:58:9a:1e:6a:a1:87:35:ac:00:fd:6c:a8:db:ac:69:9c:
fd:19:b3:a5:c6:e6:d5:a3:30:b8:f1:3e:40:b5:f5:82:f9:e1:
46:cd:49:6d:f5:0a:df:bf:fc:be:71:4c:6a:07:2d:c1:a7:d8:
bd:7f:eb:fd:b4:d7:8b:95:f3:72:a4:76:94:07:38:31:c1:cf:
d7:2e:43:2e:a9:6c:dd:fe:b8:6c:bb:da:26:35:7d:65:01:b9:
cc:c6:99:80:d7:b0:0a:93:8e:62:9e:fe:c2:a2:98:15:b5:b9:
f4:fa:15:66:56:e4:35:29:c4:57:78:ee:57:5f:5d:db:3c:27:
14:c3:bc:68:8e:9e:74:fe:b5:8f:71:30:a2:5e:be:eb:c3:59:
1f:17:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:04:26 2025 by rpki-client