Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2/39138d08-6596-3ffc-bc8d-8b9deae959f0.roa
File: 39138d08-6596-3ffc-bc8d-8b9deae959f0.roa (raw, json)
Hash identifier: jCergx6s7ovgF3ypUPkTxYV48MXUuUjvRGh/ORoRl+M=
Subject key identifier: EA:6D:65:1F:44:2C:B2:FA:4A:E8:0F:F3:E8:47:B8:C7:71:43:0B:53
Certificate issuer: /CN=f9afd038-6c26-42a9-a216-ccb00c16c4d2
Certificate serial: 010D0C9F43285847E1FA19901B6918E3F34A6480
Authority key identifier: 95:09:66:D9:F8:F3:69:01:84:4C:A7:B4:A1:C2:B8:60:B0:DD:89:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2/39138d08-6596-3ffc-bc8d-8b9deae959f0.roa
Signing time: Fri 15 Nov 2024 02:00:28 +0000
ROA not before: Fri 15 Nov 2024 02:00:28 +0000
ROA not after: Thu 13 Feb 2025 02:00:28 +0000
asID: 398647
IP address blocks: 199.73.93.0/24 maxlen: 24
199.73.94.0/24 maxlen: 24
199.73.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e1:fa:19:90:1b:69:18:e3:f3:4a:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9afd038-6c26-42a9-a216-ccb00c16c4d2
Validity
Not Before: Nov 15 02:00:28 2024 GMT
Not After : Feb 13 02:00:28 2025 GMT
Subject: CN=2fb346c1-d6e5-4e51-84e4-26946989fce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:c7:c2:d3:e5:4c:49:be:87:c6:bd:0c:ef:
9b:d1:2b:b2:85:8f:a8:ba:87:c5:a2:81:7e:3b:4c:
1d:b1:29:71:4a:42:02:2b:67:23:91:20:d7:46:54:
92:bb:88:df:a6:4c:c9:ef:a6:0e:dd:48:bf:61:8a:
d4:59:65:83:7e:19:b8:9a:51:fd:43:e9:e6:d5:92:
e6:7c:c5:71:2f:46:2e:07:08:59:bc:c6:b1:1b:54:
3d:64:d5:3b:5b:67:c1:2c:a6:b6:70:e4:8e:f5:4f:
47:c1:04:d9:aa:a0:26:d9:5a:1d:81:cd:df:af:16:
d0:76:3e:49:8b:34:5f:63:5b:5f:b0:08:51:b7:92:
38:1a:51:c8:e7:7d:13:14:f0:32:57:99:71:e8:bf:
1f:2a:c8:b8:70:3e:01:b1:dd:d6:94:b0:76:55:db:
18:1d:bd:bf:19:02:b3:ca:4b:b2:bf:e8:00:a4:1c:
79:97:91:f7:4d:f8:96:f6:7f:9c:2f:1e:96:33:7a:
18:3f:ab:38:68:43:12:20:61:e9:9f:2e:2c:04:19:
b4:3f:24:99:f3:ba:46:4c:6f:2f:a8:d5:69:29:11:
35:24:0e:6f:9c:74:70:d3:5d:e2:12:1b:4c:b7:a1:
41:c8:e6:bf:d2:63:a9:1c:21:1a:e9:65:d5:b0:2f:
a2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6D:65:1F:44:2C:B2:FA:4A:E8:0F:F3:E8:47:B8:C7:71:43:0B:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2/39138d08-6596-3ffc-bc8d-8b9deae959f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2/f9afd038-6c26-42a9-a216-ccb00c16c4d2.crl
X509v3 Authority Key Identifier:
keyid:95:09:66:D9:F8:F3:69:01:84:4C:A7:B4:A1:C2:B8:60:B0:DD:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.73.93.0-199.73.95.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:be:04:69:71:08:d3:9a:74:23:20:b0:0c:cc:50:90:b3:fa:
5f:4b:97:17:63:5c:97:64:d4:4e:ef:9d:27:56:13:28:7b:59:
e1:73:8e:31:ad:4a:1f:7a:39:b3:28:8d:55:ef:7f:d9:f6:1d:
cf:a3:40:ad:f3:92:96:c9:bb:05:fa:dc:13:36:ce:c8:fa:43:
26:ca:6c:65:b0:7b:a1:74:6d:9c:91:97:17:6f:1a:8d:56:2a:
3c:33:fa:65:e8:cf:f8:6a:1d:81:49:93:36:14:aa:93:9c:2c:
c2:68:56:31:e7:20:6a:de:ac:9a:a1:8a:a5:2d:fe:9d:b0:7d:
1d:de:bb:6e:59:2c:e6:03:a9:5a:d0:8d:ef:80:45:32:93:91:
bc:80:a3:0b:fe:93:0c:cd:45:b1:03:81:47:73:b6:3e:83:9d:
ea:e6:a1:47:35:0c:5e:ac:85:d8:96:75:7b:38:4e:3e:fd:48:
fc:df:c2:e4:db:cd:95:a3:d7:2b:34:5a:00:0c:94:d5:16:11:
2a:e0:38:a4:62:3b:30:60:2b:78:4e:af:e6:b3:f3:a4:d0:35:
15:55:a9:50:c4:5f:b3:0a:34:02:9f:2b:fe:20:95:f9:5e:be:
51:f6:bf:a5:51:90:ce:e8:58:2d:dd:e4:5e:d3:02:71:6c:bd:
68:b1:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:03 2025 by rpki-client