Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa
File: defae92a-38aa-3188-8dfa-60a7fa4efaff.roa (raw, json)
Hash identifier: Odr1v3em27hjJdDX6DCsxKVFdjVDGa7Wq+q6QzGMMsY=
Subject key identifier: 30:52:4F:61:2F:58:E6:00:81:0A:66:99:4E:ED:90:6D:8B:55:A7:BC
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F43285848AFBFE2C3DDED4730F38C1480
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa
Signing time: Mon 27 Jan 2025 18:59:58 +0000
ROA not before: Mon 27 Jan 2025 18:59:58 +0000
ROA not after: Sun 27 Apr 2025 17:59:58 +0000
asID: 15164
IP address blocks: 199.200.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:bf:e2:c3:dd:ed:47:30:f3:8c:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jan 27 18:59:58 2025 GMT
Not After : Apr 27 17:59:58 2025 GMT
Subject: CN=73a4d9e5-2533-41ab-8e08-ce5d6b80cf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1c:3f:f3:56:00:46:ed:49:45:92:dd:f7:de:
26:ba:b0:a7:b3:87:3d:91:7f:01:ca:cd:a2:7e:7e:
db:88:a3:16:2e:4c:36:59:cb:48:32:bc:a4:7e:31:
9a:7b:0a:6d:60:0f:77:a4:8e:bb:7b:fe:e1:99:61:
55:52:92:41:bc:60:0b:38:de:9c:e9:2c:b1:93:a3:
24:e2:0b:74:9c:23:48:5a:77:27:ca:3d:90:c6:2a:
91:64:82:f6:db:7a:1a:82:bf:1b:df:1a:7c:bb:c4:
b9:0a:96:5b:37:30:46:36:02:95:5a:54:e5:bc:c2:
ee:2d:50:28:6a:3c:a8:75:ba:b8:35:56:d8:a4:1e:
75:26:94:8e:b9:0d:c1:ec:bf:f9:d0:9d:54:d8:a5:
bd:59:82:5d:b6:3e:4f:2d:6d:8b:69:4d:2d:c3:ab:
dd:7c:a9:f0:f2:d8:9b:c8:5b:a9:9b:fc:17:f4:2e:
6e:a6:70:73:13:5d:03:a6:90:23:b6:58:4b:59:5b:
40:6f:04:69:b6:01:4e:e0:45:38:55:29:59:34:a4:
5a:5e:ed:72:9d:de:9f:4e:5f:4b:37:09:e8:6b:b4:
2a:8d:65:42:38:1c:b7:e9:ee:7b:9f:6d:18:ee:82:
b6:13:e8:3d:c8:4a:12:1b:26:92:11:0d:bf:61:05:
af:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:52:4F:61:2F:58:E6:00:81:0A:66:99:4E:ED:90:6D:8B:55:A7:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
199.200.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:47:95:02:c1:c5:c0:c8:5f:6c:ea:70:92:83:2d:cb:d2:0e:
11:04:db:7e:c0:2f:f3:48:14:fa:62:fe:8c:23:0c:f2:53:5b:
54:e1:23:84:80:19:ba:20:c5:b4:03:31:da:68:84:0f:b2:4f:
64:eb:87:93:a5:ac:11:4f:92:a2:9b:1d:1f:78:04:5a:c4:c6:
0e:90:16:95:69:af:3c:b8:55:f4:a6:48:a5:0a:12:09:48:cd:
7c:81:4e:2d:a2:92:b9:7d:84:31:91:a4:8c:6d:c5:89:93:c4:
bb:08:94:5d:bc:9b:e8:c7:6d:27:47:cd:68:46:fa:cd:bf:77:
9f:99:98:c6:4d:f0:2d:f4:8f:5d:43:a8:cc:7b:bd:70:88:07:
2f:39:a0:01:2a:b4:12:95:c5:71:63:af:cf:a4:8e:92:90:bd:
74:11:d8:33:20:2a:b2:ab:91:a7:98:ca:94:6a:d1:47:68:7f:
14:40:55:53:ba:ac:4c:9d:fe:09:6e:75:57:95:2e:4f:c4:15:
09:9e:f4:49:de:59:3b:18:c9:5d:6d:06:14:60:f5:ea:7a:e3:
2c:ce:90:3a:71:ca:76:34:8c:56:0d:bb:e6:33:22:1e:db:34:
2c:47:74:7b:1a:23:58:64:46:7b:6c:2a:09:67:20:96:8c:a7:
71:e9:76:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:30 2025 by rpki-client