Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/bbf789c9-4c12-3f30-896b-afbbef1c91c6.roa
File: bbf789c9-4c12-3f30-896b-afbbef1c91c6.roa (raw, json)
Hash identifier: C32kkkeL9x14FskvhTGrWninOzcq4ipmPMV4hoq6mnc=
Subject key identifier: 62:23:EE:39:EF:E0:78:01:E0:CB:15:27:86:AB:CE:47:72:ED:9A:CC
Certificate issuer: /CN=4cd4075b-ef78-4472-b954-b5adf4a534e5
Certificate serial: 010D0C9F4328584905B6B87ED6A96CACB8408120
Authority key identifier: D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/bbf789c9-4c12-3f30-896b-afbbef1c91c6.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 14618
IP address blocks: 199.91.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b8:7e:d6:a9:6c:ac:b8:40:81:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd4075b-ef78-4472-b954-b5adf4a534e5
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=9227c71a-3a0e-482e-8aec-9a42c6395514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fa:cc:ea:c3:90:a9:ba:57:5c:51:51:ec:12:
d8:e1:6a:25:40:ed:96:6e:6e:87:44:0c:e2:9b:4b:
9f:d7:ae:86:4c:15:88:01:67:8e:74:b6:e5:d9:c6:
9b:48:4f:94:0e:d3:40:ba:48:2a:90:e0:bf:29:23:
9f:de:64:3b:5a:1a:7c:c4:14:2a:d0:b7:c5:04:37:
35:6a:3b:18:72:ca:56:52:bf:a3:e5:56:72:45:2a:
c4:d7:04:f6:c2:18:a3:90:b7:43:c0:b0:00:b9:e8:
f4:5d:a7:1d:fc:4c:fa:ca:ec:22:c0:f7:41:fa:0c:
19:d4:0e:a6:89:7d:88:af:7e:66:3a:7a:5e:29:34:
27:98:3c:48:67:90:84:6e:e3:01:cd:b7:b3:0a:74:
d5:84:a4:01:f7:37:29:05:9b:c6:e5:e7:73:8e:06:
4a:18:c4:ad:18:7e:dd:45:30:b3:43:3c:16:ed:d9:
2e:e9:3b:b0:75:29:85:31:46:fc:15:36:e3:f6:56:
7f:56:51:98:b4:9a:c9:a4:19:88:cd:6d:28:da:e4:
2d:74:df:2e:79:cd:45:4a:7f:92:4a:a2:34:1a:c5:
8c:86:3b:99:84:a9:ca:e5:75:be:3c:34:bf:de:18:
97:a6:23:f6:d9:33:ef:77:02:0d:80:fa:1e:f5:96:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:23:EE:39:EF:E0:78:01:E0:CB:15:27:86:AB:CE:47:72:ED:9A:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/bbf789c9-4c12-3f30-896b-afbbef1c91c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.crl
X509v3 Authority Key Identifier:
keyid:D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:72:c7:67:52:00:1f:b4:6d:1b:12:37:d9:bf:8a:6b:17:b2:
f5:14:7c:41:78:1e:cb:ef:24:f2:42:93:60:aa:76:99:97:1c:
41:68:c0:af:6d:5f:59:b2:82:b8:79:c9:35:f9:16:c1:04:8b:
2b:8b:43:33:cb:90:08:9b:ba:ad:ba:ad:5f:2b:82:e4:8b:81:
a3:d4:2f:ae:de:ff:21:5b:5a:69:b3:79:f2:5d:0c:cc:d7:f2:
38:c4:45:35:bf:d4:25:44:c7:6c:48:6a:5a:0e:28:93:7b:d3:
b4:9b:38:4c:e0:73:14:c5:c1:33:b0:e5:df:ae:ef:be:f0:56:
55:03:58:d9:e7:7f:b8:e9:da:89:91:5c:dc:0d:f6:33:fa:a5:
c6:d7:47:62:d7:c1:e4:b7:74:e1:37:9b:06:b4:ee:03:6e:32:
84:08:71:f3:16:a1:ee:4e:27:dd:91:4d:e5:66:e6:a3:0a:75:
e3:2d:ef:d0:bd:a8:dc:8f:09:9d:58:4a:f4:f4:9a:cd:18:88:
87:24:67:bd:47:44:32:6f:25:8a:61:51:04:c5:8f:01:e8:da:
cd:1a:ec:cb:9f:81:89:bf:26:ad:e7:6a:61:bf:9b:f6:9b:bb:
05:ba:92:5a:53:5a:ad:62:a6:30:5b:f6:ba:1f:30:1f:bc:6b:
41:77:45:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:11 2025 by rpki-client