Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/18700f61-d760-3b7d-b2c8-b36747bcfb49.roa
File: 18700f61-d760-3b7d-b2c8-b36747bcfb49.roa (raw, json)
Hash identifier: tKiYK9U4pWBh1iM5YeNZJBqkBGJ+A7IaeKHArfc5skY=
Subject key identifier: EE:9C:C2:92:13:E8:A4:7B:AF:3B:C8:11:19:93:79:F4:6D:1A:DD:19
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F43285848A484F3EC994B91674BEF7400
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/18700f61-d760-3b7d-b2c8-b36747bcfb49.roa
Signing time: Thu 23 Jan 2025 18:27:20 +0000
ROA not before: Thu 23 Jan 2025 18:27:20 +0000
ROA not after: Wed 23 Apr 2025 17:27:20 +0000
asID: 15164
IP address blocks: 138.199.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:84:f3:ec:99:4b:91:67:4b:ef:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jan 23 18:27:20 2025 GMT
Not After : Apr 23 17:27:20 2025 GMT
Subject: CN=c49aea5b-27f7-4454-936d-7b9bc9e0698f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:28:78:26:5f:35:c9:0f:0e:8e:d2:59:b0:
34:9a:36:6f:41:de:34:c4:6e:03:ba:8e:41:55:c5:
2b:98:fb:65:88:bc:62:40:56:83:c2:a1:bd:55:c5:
8a:b4:6f:13:2a:a4:56:44:b3:45:37:a6:b7:20:63:
e3:66:0d:94:3e:4a:29:94:08:be:d1:b7:d1:b4:3d:
ed:87:90:1b:25:8f:12:36:89:3f:bd:aa:5a:3e:54:
c3:2e:dc:fe:f4:c0:a7:1d:9b:65:f4:36:18:2d:5a:
1d:70:29:5c:fb:63:d1:df:47:c7:84:65:40:e7:04:
8e:6f:3d:e9:5e:7f:00:cd:69:46:7d:db:7b:a6:ad:
31:ed:31:84:e6:95:5c:8f:2b:55:31:2a:47:8b:b4:
52:ed:b7:ec:95:e4:f0:56:86:ea:e2:35:f2:68:bb:
e4:82:94:8a:ec:5d:5a:e9:03:69:20:92:99:8e:39:
41:4a:4f:7c:b1:8c:40:91:bf:4a:4a:ab:84:58:7c:
36:bf:d7:a7:06:b8:2c:9b:e9:69:4d:e0:a2:64:5f:
88:ce:5f:9e:19:ce:5c:33:c8:15:4f:fc:2a:30:bd:
7e:0e:ce:01:d3:82:10:80:db:10:d9:53:ad:9b:ad:
f0:0a:85:d1:e7:bb:0a:f7:32:4f:fd:70:15:f5:ab:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9C:C2:92:13:E8:A4:7B:AF:3B:C8:11:19:93:79:F4:6D:1A:DD:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/18700f61-d760-3b7d-b2c8-b36747bcfb49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
138.199.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:b9:c1:3a:cb:8f:e5:01:71:02:d3:d9:8f:bf:5e:bf:bb:ad:
98:7f:f9:d1:b4:e8:15:0b:bd:fc:4d:c6:0c:c8:04:76:93:54:
44:a6:8f:41:3d:94:1d:4a:af:fc:16:a7:c1:3b:ef:99:36:7c:
7b:7e:cc:36:5b:46:2a:6b:7f:7e:de:8b:15:c9:aa:ab:a0:12:
93:20:14:06:b6:71:08:96:c5:e2:c6:ce:13:d1:c0:ee:00:3a:
96:b1:4b:67:a8:7c:53:af:a7:39:73:f5:ed:5c:84:7f:18:64:
84:0f:77:f5:ea:0f:7c:b1:99:86:ae:ce:33:0b:df:bc:21:6d:
e1:59:f9:73:4f:fe:43:10:1b:88:f1:44:d3:50:c0:4d:fa:08:
34:d4:62:3b:ec:f8:32:62:a2:b0:27:57:23:07:f0:74:be:fb:
b3:7c:2f:8b:76:0d:c2:ca:1b:36:ab:72:81:bb:12:29:88:e0:
b8:33:e0:ff:89:b9:69:ff:1e:9e:95:13:8a:bf:c3:d6:91:3a:
ac:eb:c8:ea:52:ed:10:4f:fd:64:39:48:57:b8:33:4a:1a:06:
bb:d2:ff:eb:bd:e9:ba:6e:74:7f:59:63:2a:47:d1:bc:b3:91:
97:f3:70:15:76:94:21:e1:62:1a:f7:4f:f9:b3:d8:54:e9:94:
91:75:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:17 2025 by rpki-client