Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/ad0512fe-a3fe-3587-b2d5-a1f41737beaf.roa
File: ad0512fe-a3fe-3587-b2d5-a1f41737beaf.roa (raw, json)
Hash identifier: rMp3tldaGHmNP1ny0HqhOzhzMV4kRGVj7TySccT0J2c=
Subject key identifier: 6B:A1:DF:88:02:B9:21:AD:8E:83:82:27:16:F6:59:A6:8D:0C:91:D5
Certificate issuer: /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial: 010D0C9F43285848CB1657B2E759321C666D2CE0
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/ad0512fe-a3fe-3587-b2d5-a1f41737beaf.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 19605
IP address blocks: 192.222.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:57:b2:e7:59:32:1c:66:6d:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=b078b68a-fb68-467a-835d-204524eda0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4c:45:52:41:ab:d0:17:b3:b0:e8:35:07:66:
ee:cc:53:d5:a0:d8:2a:e5:d4:98:f1:ce:64:7e:56:
ee:7a:e4:7b:01:8a:3a:a7:0a:b3:21:84:c0:df:a9:
01:13:88:b2:4e:91:fa:5b:4f:c6:4c:fb:76:c9:36:
70:ea:ca:4a:35:b3:44:b4:95:f6:6e:ee:f5:5b:4c:
4b:be:d6:66:8d:39:c0:d2:06:53:7f:18:05:65:cc:
1a:2c:8a:1d:82:60:75:14:6b:f0:ee:a5:c2:37:41:
2b:2c:0a:ac:b5:5a:b7:08:98:01:84:9e:81:95:45:
1d:9a:ac:c5:e2:84:bb:4a:fc:ab:f5:58:96:b2:5e:
6a:01:dd:d5:cc:fd:8d:e1:db:a7:db:7b:2e:0e:42:
a9:e6:e2:e4:01:e7:97:64:32:8c:ef:b8:10:51:6d:
a2:66:51:f3:61:4c:62:b7:09:76:72:e2:aa:86:6b:
91:23:4c:e3:57:9b:1b:e8:14:55:e6:b4:5d:3d:2b:
3a:33:9a:a5:a5:b8:57:7e:f4:36:c4:97:32:96:70:
7d:60:3b:c3:1b:b8:7e:f6:d7:d5:ca:0c:ff:a1:ed:
7b:15:8e:a7:2b:12:45:ce:ce:91:5f:99:64:32:1e:
2b:ca:63:56:7e:1d:ed:08:d1:90:aa:9b:8e:3e:af:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:DF:88:02:B9:21:AD:8E:83:82:27:16:F6:59:A6:8D:0C:91:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/ad0512fe-a3fe-3587-b2d5-a1f41737beaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
X509v3 Authority Key Identifier:
keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
sbgp-ipAddrBlock: critical
IPv4:
192.222.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:b2:a7:1f:68:cd:fc:a0:73:9e:ca:26:6e:4a:a4:74:6c:81:
7f:58:ea:f9:1f:f4:be:af:9f:37:da:20:65:ea:f7:e5:de:ac:
58:5a:6d:39:33:06:36:eb:66:c0:38:4b:74:fe:a2:0c:56:00:
d4:4d:06:99:6a:0c:4a:41:37:82:31:31:97:87:a4:fe:7b:38:
a5:43:72:12:44:1f:2e:d4:80:45:8c:82:75:b2:cd:9f:fb:dd:
56:84:73:2d:4e:09:dc:cf:e8:1a:d9:ff:04:68:35:2a:8c:95:
24:eb:7d:72:12:77:c8:6c:5d:03:35:ae:9c:08:1e:42:95:78:
8d:80:46:14:1c:a9:3f:b1:da:fd:41:ed:98:f1:6f:24:9c:68:
8a:0d:68:22:02:4b:60:7f:b9:7d:1d:7c:b8:71:e5:0b:25:9a:
83:2a:77:d4:0a:3e:8f:58:49:d2:40:5b:aa:c5:ea:62:1b:2e:
81:01:79:ea:b3:71:02:ef:31:28:89:8f:9d:6d:b9:99:6d:69:
27:cf:07:04:a4:46:5a:11:44:04:00:19:88:39:89:c1:05:40:
d6:3c:ed:8a:db:4c:b0:28:46:0f:ab:11:3b:41:40:4f:fb:a0:
9b:4d:ad:9b:5c:4b:b7:a1:bf:84:51:09:74:db:49:c3:c4:37:
73:4c:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:19 2025 by rpki-client