Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa
File: a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa (raw, json)
Hash identifier: NtOGeGRy50ocPPQ9lJRYUhiEHHLsyyg8hhr4PZEIM8w=
Subject key identifier: A9:4D:48:D7:F9:2E:0F:E0:57:C7:07:71:EE:D2:0E:46:93:42:B9:BF
Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial: 010D0C9F4328584902EC0868B75CACF70B76FC40
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 11260
IP address blocks: 24.142.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:08:68:b7:5c:ac:f7:0b:76:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=a307fff6-6a5f-404f-aadc-ebbb764cf675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:3f:15:43:e8:17:5d:6b:74:83:7a:a3:ba:
4d:2a:e8:f2:b5:30:d7:41:44:ed:1c:5f:7a:23:51:
b8:e6:6e:24:62:60:17:eb:ae:67:ba:88:5b:31:3d:
f4:03:a1:f1:96:89:25:1a:6d:40:ec:3b:48:81:fe:
5c:1f:34:f0:bd:f4:c7:02:8b:eb:80:cd:be:56:50:
6d:00:40:17:08:59:b0:b0:da:07:2d:b9:b3:87:9d:
3f:b1:ee:d8:58:07:c3:bd:4a:1a:02:ee:13:04:4a:
8c:2d:7f:a4:9f:17:02:34:30:c1:d7:87:d2:17:e3:
a6:67:32:be:4d:1e:b9:8f:a4:31:af:2e:b2:a8:fe:
2d:ea:09:4a:09:eb:2e:97:92:36:b7:33:4e:81:af:
0f:11:57:d6:f6:1d:7d:76:62:2d:60:ee:c1:e7:9b:
77:9f:95:22:6b:da:8c:a1:56:96:7b:cd:ef:06:c8:
67:01:a3:04:1a:c7:02:c3:11:96:55:61:e1:95:17:
5f:57:9b:17:96:13:f6:ce:db:15:5d:df:a1:8f:82:
ca:21:de:0d:ef:ff:a3:a2:92:55:c9:39:8b:6e:80:
f1:7a:dc:4b:6e:d3:e6:ea:3d:3b:7e:ea:c2:f1:62:
70:4f:df:88:a7:bd:13:d6:4a:06:f8:fc:f8:16:0e:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4D:48:D7:F9:2E:0F:E0:57:C7:07:71:EE:D2:0E:46:93:42:B9:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
X509v3 Authority Key Identifier:
keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.142.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:3c:c2:fa:c7:f6:63:b0:1d:7b:a9:a1:6f:ae:3f:3f:5e:38:
3e:29:6c:44:04:d0:62:14:a6:9a:ed:7b:ac:14:71:2b:d5:07:
b3:db:61:28:9a:66:bd:05:9b:c7:61:97:d0:20:d4:fc:ab:57:
f2:92:fc:69:5d:c5:7d:b4:96:e6:89:e8:10:d2:14:69:fd:ab:
41:59:30:f5:53:c2:92:67:d0:a6:42:cb:c9:77:fb:0e:89:63:
0a:ef:17:ac:4d:10:48:c6:4a:f6:be:77:b2:b1:08:73:8b:5e:
96:8e:b8:99:bc:cd:65:40:e2:60:bc:2a:71:37:e5:c8:5f:0c:
39:4a:ee:98:35:b8:54:ae:ac:1e:55:fa:38:7b:59:5f:f1:73:
ab:04:00:15:59:1f:7d:fc:1d:ca:8e:be:a5:16:70:d0:76:19:
27:2b:85:98:97:7c:60:6e:f5:30:94:24:a4:eb:97:2e:5b:8c:
3f:0d:5b:1e:2c:38:cc:c0:be:32:8a:b5:7b:33:fd:55:69:1d:
de:92:9b:a7:c7:cd:cc:a4:10:b3:93:db:7c:0f:ac:68:65:94:
7d:65:57:03:d8:57:a0:0e:65:0e:54:93:01:96:1c:64:05:83:
ba:f8:bc:e3:a0:af:1c:cc:89:4c:9f:22:9f:9c:e6:ed:02:cd:
a0:3a:d6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:42 2025 by rpki-client