Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/007f24cc-fba9-31c7-874d-1e34664494bf.roa
File: 007f24cc-fba9-31c7-874d-1e34664494bf.roa (raw, json)
Hash identifier: ffEwQ5ZeiF/LehfPxrhi/8w5KvoLCuYIJvWRZzVOwBs=
Subject key identifier: 2A:08:F9:DB:A1:C8:B7:EC:19:2C:8D:B3:5E:EC:31:42:6F:15:85:49
Certificate issuer: /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial: 010D0C9F43285849287E666CC3897E85F9C72D80
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/007f24cc-fba9-31c7-874d-1e34664494bf.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 31898
IP address blocks: 199.68.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:66:6c:c3:89:7e:85:f9:c7:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=41ef5bd3-270f-44f7-9cb9-a7a6f8e35470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:04:26:83:3e:de:52:5d:27:33:7b:bf:16:
dc:26:ac:45:34:35:92:bf:c0:1d:e3:37:a8:43:4a:
13:5c:bb:43:50:da:82:e7:3f:02:7f:6d:27:ae:89:
83:4a:77:4b:53:3f:41:1c:91:23:d3:67:7b:49:55:
ec:85:8b:3a:34:87:78:7d:20:35:ac:5d:23:6a:e6:
87:55:6e:7f:c1:5c:fd:e9:b2:45:4f:f8:11:24:b6:
fa:88:c8:0b:84:bd:98:eb:14:c6:a2:b2:0d:cb:66:
84:fe:bc:17:0f:11:46:34:1c:c5:0b:d7:93:e5:6f:
63:1c:f3:71:35:2e:0b:1b:e2:9b:6c:e7:e0:76:b2:
85:e1:5b:b8:b9:e9:ef:b8:ba:79:f6:30:e4:3e:8e:
c7:41:c9:29:15:24:c6:af:b9:d8:a6:3b:b0:0a:3f:
de:6e:e9:eb:a7:33:a9:d8:5a:30:bf:bf:51:6f:ca:
b0:e3:a3:e4:76:bf:80:16:e9:04:d5:69:2d:84:87:
3c:d9:15:bd:4a:db:2a:bd:1a:c9:8c:93:cd:47:6b:
d0:36:7a:d6:88:a6:50:b3:12:38:f9:43:31:5c:7a:
d5:ed:21:d7:a9:aa:67:b1:06:bd:1e:97:43:96:0b:
f9:ce:81:48:65:a3:34:87:1e:6f:2e:f7:33:66:10:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:F9:DB:A1:C8:B7:EC:19:2C:8D:B3:5E:EC:31:42:6F:15:85:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/007f24cc-fba9-31c7-874d-1e34664494bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
X509v3 Authority Key Identifier:
keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:6b:81:77:74:bd:cb:21:be:f4:6a:d8:84:b6:05:bd:1b:10:
4d:ac:03:1d:60:f7:49:b8:76:00:05:20:12:c2:12:b7:85:10:
0d:5c:a2:de:e6:03:0f:90:42:70:80:32:71:dc:5c:59:72:89:
13:0f:9c:cf:af:e0:83:9c:6e:0e:24:9b:d1:36:46:bb:56:49:
8b:13:63:ac:05:01:bb:b5:3c:6d:06:c4:b6:22:87:4b:78:43:
85:64:85:e4:29:f5:da:bd:92:27:a6:7b:14:a1:48:90:b1:bd:
42:4e:e5:26:e4:44:04:b8:81:8f:9c:2f:2c:9d:f5:53:e7:3c:
d9:90:5c:39:b0:fc:02:4e:06:1e:f9:de:45:26:46:4b:c1:be:
5e:51:b8:f5:7a:4f:3e:11:6f:0e:0d:97:b2:8c:5a:b4:c2:fb:
d2:71:c4:6f:e0:3e:bb:03:56:8b:b2:b0:df:61:32:5b:a8:ca:
be:56:14:1f:21:3f:ec:93:d6:af:be:b1:f2:74:12:7b:60:d8:
52:98:8f:5b:a4:6b:e0:a8:fd:59:26:58:87:67:72:e3:a9:57:
8e:72:c6:a4:d2:9f:5c:5b:4e:11:9f:45:a0:85:11:ae:38:91:
38:84:07:50:04:f3:77:ac:49:9b:09:ff:34:23:13:ba:e2:71:
f2:3a:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:19 2025 by rpki-client