Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa
File: be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa (raw, json)
Hash identifier: YJVf4JlYGbZEzj3OFBqTujET9XVJPxq2gJSaq327ZAk=
Subject key identifier: 8F:47:4F:E9:85:79:3A:79:A6:96:79:92:98:41:65:A4:DE:75:52:59
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490021702E6E629ECED6610B20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 35994
IP address blocks: 69.192.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:70:2e:6e:62:9e:ce:d6:61:0b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=38889ce6-7a52-4733-a816-0e8603ba2a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:df:7b:8d:2f:fb:d8:71:29:48:75:ce:67:
0e:52:7b:d5:69:c4:a4:a5:23:b4:1c:f9:39:22:2c:
ee:23:96:28:9b:2a:d5:fb:35:4e:54:a5:d0:42:d9:
53:06:08:6d:8f:1c:5d:68:67:e1:c1:df:99:7b:b1:
87:b6:5c:19:37:26:1c:66:50:04:af:0e:c5:f5:3d:
00:2f:72:a2:86:0e:b1:d9:91:ed:78:5f:2d:06:27:
fb:79:33:8b:bc:6f:de:8b:64:42:e5:9e:a7:ce:d9:
b2:4f:f8:ee:52:9b:54:9b:15:da:09:2e:9b:66:1a:
1c:a8:c3:47:f7:d6:20:24:16:b6:1d:70:4e:c8:39:
82:30:94:62:f8:7d:b2:f9:35:09:9e:a4:92:b7:80:
15:3a:25:69:85:1f:5b:6f:84:76:87:69:df:c0:0a:
fa:1e:6e:d2:06:0c:9e:ac:e8:fd:19:97:1a:68:a4:
97:27:87:5e:fa:8c:d0:52:19:db:4c:dc:8b:01:a5:
7a:e7:73:61:05:30:99:72:3a:30:e9:db:d9:9d:e9:
8c:8a:92:b0:59:05:f6:e9:bd:43:5d:3e:91:18:23:
b1:dd:f4:93:2a:06:a8:bb:21:c2:df:0d:5b:90:9e:
2e:70:e5:57:ad:83:fd:a2:68:bc:d7:74:6f:37:8b:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:4F:E9:85:79:3A:79:A6:96:79:92:98:41:65:A4:DE:75:52:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
69.192.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:a0:9b:a4:06:b4:b9:25:51:43:8c:03:13:f4:75:3f:c2:0e:
f1:c0:e7:aa:80:02:63:34:93:6b:f5:59:80:ad:4f:7a:b5:97:
a4:93:c4:d1:e0:a5:19:be:cf:c7:9b:4c:2d:3e:73:3b:78:91:
52:18:dc:7e:29:dc:f6:6e:14:76:c5:bf:2f:19:3e:be:5b:59:
ed:85:0e:c7:45:f7:f3:6a:db:40:8e:b2:dc:f1:c9:33:c5:f4:
62:ca:d0:1a:c5:32:93:4b:4d:18:87:06:df:9d:71:3b:68:9f:
30:13:5f:39:c8:6b:25:df:5c:40:12:02:75:ba:63:5f:52:8d:
28:b6:fb:36:9a:af:80:34:18:da:b0:10:ed:aa:6b:09:76:ce:
e4:58:7c:99:22:e6:6f:59:2f:cb:67:4f:81:ec:0e:c2:43:80:
3e:66:57:9f:ca:46:29:45:e0:3a:a2:20:d4:10:ca:d6:ad:ce:
ed:b8:de:1c:bb:51:06:ca:4b:2e:cc:bb:75:2e:a4:fd:ca:06:
9a:cb:00:1c:f9:53:6a:d1:47:1a:37:8b:78:1e:e8:bb:ce:01:
61:6f:69:cd:d4:28:ee:a3:e2:e2:e7:bd:43:aa:a0:cb:89:13:
20:f8:aa:c1:4a:67:fa:52:d1:0b:0b:30:66:62:e1:c8:c8:3f:
0e:4c:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:32 2025 by rpki-client