Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/798f5736-aebf-36b1-9bcd-3e87a5432b0d.roa
File: 798f5736-aebf-36b1-9bcd-3e87a5432b0d.roa (raw, json)
Hash identifier: twxdbxOha4GhwWnNnMPejyO1d7/EK00puqGeePx3l7Q=
Subject key identifier: 52:A1:54:59:EA:A0:19:AF:49:D9:57:E6:79:A5:E8:18:56:19:42:42
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F43285848AFDC3114C2F4170F6FF1B0C0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/798f5736-aebf-36b1-9bcd-3e87a5432b0d.roa
Signing time: Mon 27 Jan 2025 19:57:00 +0000
ROA not before: Mon 27 Jan 2025 19:57:00 +0000
ROA not after: Sun 27 Apr 2025 18:57:00 +0000
asID: 15164
IP address blocks: 208.82.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:dc:31:14:c2:f4:17:0f:6f:f1:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jan 27 19:57:00 2025 GMT
Not After : Apr 27 18:57:00 2025 GMT
Subject: CN=1925e279-361c-457f-bc05-de2f93775a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:05:02:b3:11:34:ca:e3:17:10:1f:89:d3:
8d:04:8e:9f:1a:85:76:fd:d5:14:b1:07:22:58:2d:
85:55:6e:47:53:74:48:9f:de:45:49:e3:0e:3d:ed:
32:59:5c:3b:03:fc:30:85:73:74:d7:2d:eb:13:8e:
09:2b:82:9f:35:f8:fe:9b:cc:bd:d6:c0:1a:4b:56:
bf:fa:ed:f7:88:f2:cd:3e:af:2c:2e:df:e9:e5:45:
fe:b7:56:b0:66:a2:54:77:ca:85:81:24:93:d9:1e:
eb:9b:34:73:b4:ed:1e:be:12:42:0a:87:a2:23:05:
a5:86:97:1b:30:a7:b4:c4:2b:66:48:27:31:93:e1:
a5:bc:00:7a:4d:68:61:6c:4e:5f:b0:d6:88:de:0d:
a6:9f:8e:3e:53:29:7e:98:73:3f:e0:81:4b:bd:d0:
fe:0a:0b:ec:03:9e:9f:ff:79:d3:bd:f4:70:b2:ab:
51:14:47:ec:b5:a8:2b:30:f2:10:d4:bb:ca:b7:8c:
14:fa:d9:1e:7b:e9:d4:22:1d:95:ea:b2:37:a5:7c:
6e:3c:86:2a:6f:4c:25:e4:f2:3f:7e:ad:75:56:26:
d9:82:9b:91:ab:21:bd:d8:13:3d:04:11:3b:e0:8e:
71:91:11:a5:1c:4c:e2:f4:5b:75:bd:5f:db:03:a9:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A1:54:59:EA:A0:19:AF:49:D9:57:E6:79:A5:E8:18:56:19:42:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/798f5736-aebf-36b1-9bcd-3e87a5432b0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
208.82.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:72:ae:6a:82:82:b4:ed:e0:75:c2:7f:42:73:67:16:57:89:
53:17:e3:54:fe:eb:d5:67:3e:a8:09:56:b9:22:00:c6:ac:60:
0e:63:f0:8b:77:17:c1:0e:cb:65:fd:b7:31:a0:25:23:4f:8f:
ac:0a:41:a2:2a:e0:85:5c:5e:6b:5b:27:84:13:ec:36:94:2f:
b0:e6:d5:b3:78:26:f0:47:47:ee:79:71:d1:39:11:b2:d6:07:
b5:bf:43:ed:25:72:6d:a2:47:fb:5b:98:79:e3:30:d7:96:5b:
0a:a2:81:19:9e:8e:f4:5c:81:32:ed:be:cd:ff:2b:0d:c8:36:
20:6d:64:7f:b1:22:e4:7f:4a:40:3c:b7:a6:e9:87:80:71:d0:
1c:ea:ed:8c:8c:f0:17:ce:65:30:2d:8d:c2:ab:a6:fb:36:b3:
f6:1c:1d:d9:72:17:53:12:e5:11:2a:79:db:0d:6a:e3:7b:96:
28:20:19:23:2b:62:ec:6d:f8:ba:c1:1e:00:16:53:dd:9d:bf:
84:d3:fc:3e:09:70:73:9e:1d:0e:25:40:d8:77:ab:11:d6:50:
35:29:ec:7c:eb:aa:18:21:2f:42:c0:bd:b4:d0:cd:2f:5b:10:
fe:65:1a:01:1a:0f:42:ec:93:55:dc:76:a3:ee:ba:db:93:e3:
82:05:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:31 2025 by rpki-client