Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/66fd05c3-2a7f-3e12-9ed9-5885f3241205.roa
File: 66fd05c3-2a7f-3e12-9ed9-5885f3241205.roa (raw, json)
Hash identifier: FB4hDa8HSGYNAcLCejmdt1sdgxvQrRxfbde1AhWhkxc=
Subject key identifier: 92:4E:5F:64:F1:06:F9:3E:22:C3:EB:6F:66:5A:5A:45:7E:57:6D:D0
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B1F62978F1CF1141E64838C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/66fd05c3-2a7f-3e12-9ed9-5885f3241205.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7861
IP address blocks: 209.91.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:29:78:f1:cf:11:41:e6:48:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=c63ce27b-8b6e-423f-bb6f-0bf25a8051ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:56:3c:a8:67:52:1d:a9:3e:84:53:d5:e7:
03:ab:4a:31:bb:79:5b:31:3c:40:4c:bb:87:a6:f2:
28:71:81:21:0e:21:07:b2:00:e2:46:db:02:e0:41:
3f:e6:0d:62:6d:c1:9b:72:29:09:2b:5f:dc:96:1e:
63:62:90:8e:f0:28:ac:13:25:5a:f0:c0:e9:90:bc:
5e:30:3f:24:e0:58:46:76:bc:f9:db:47:db:d0:f4:
a4:05:e3:f7:d5:74:56:1b:a4:31:8e:72:50:32:1e:
e1:7b:b7:e3:9a:d1:51:27:ee:f0:ae:b4:3a:c8:24:
81:14:cf:65:38:0b:50:91:12:4a:52:92:8b:d8:d2:
23:d0:55:c7:d6:35:c3:9d:e4:f1:aa:d1:f0:5c:78:
f9:f4:f8:dd:10:be:fd:e7:41:f6:bc:d0:1a:32:0c:
da:3e:1c:5b:7c:63:f9:d0:a0:f5:da:37:75:a5:62:
ed:9f:c5:9d:34:47:bd:26:4d:fd:60:d7:24:7d:6a:
2a:b3:62:bd:b6:bc:a1:75:ef:5b:a2:3f:5d:fa:81:
5f:c4:81:ac:c2:28:0c:69:e4:7a:7c:ae:1b:cf:d2:
34:3e:2d:63:ad:51:a3:3b:15:bd:3c:85:c5:c6:c6:
ef:dc:8b:17:5d:c8:a5:49:85:cf:f6:ac:d5:bb:9f:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:5F:64:F1:06:F9:3E:22:C3:EB:6F:66:5A:5A:45:7E:57:6D:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/66fd05c3-2a7f-3e12-9ed9-5885f3241205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.91.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e5:c8:61:7c:c8:31:04:a9:aa:f0:8b:9a:23:25:0d:17:f0:8b:
99:6a:d5:76:a6:2f:68:06:36:18:c4:47:04:42:77:86:88:84:
b8:86:07:60:df:a6:95:03:b3:bb:a8:9b:d6:f2:dd:09:37:d5:
a4:21:fa:39:83:03:de:ef:f0:2d:c5:38:64:59:dc:a6:48:a1:
87:5d:3f:94:69:08:84:0a:27:a5:ac:6c:8f:fa:07:ca:85:fc:
e6:37:45:0a:59:0a:c4:81:ba:65:4d:a7:7c:35:2a:67:b2:e5:
e2:92:ba:b8:49:e1:b1:93:d2:57:e2:72:af:0e:65:bb:9c:d9:
1f:a1:7b:1f:08:18:90:02:8b:54:9b:21:58:7a:ed:aa:20:9b:
dc:d7:51:32:04:80:6e:61:0a:95:82:aa:ae:7e:77:25:d9:db:
7e:e1:d6:ed:ee:54:c2:9f:df:d2:5c:e4:b1:42:94:12:3b:c5:
83:51:90:04:38:a7:38:71:4e:88:83:5f:a4:96:e5:b0:9a:15:
80:d9:65:a0:f9:20:0c:e2:4e:c5:53:54:7f:51:62:67:00:8e:
f2:98:db:5b:f5:01:18:58:67:c9:5a:b9:25:f7:22:1c:88:e7:
f9:7c:eb:64:5e:6e:e3:e7:48:08:2d:19:83:37:69:e2:4a:ce:
d7:b4:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:17 2025 by rpki-client