Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa
File: 45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa (raw, json)
Hash identifier: TrjY9ZZw3J3LjEiRsyCE/6kw/MQvPLvYW3aqmeFHq4M=
Subject key identifier: A8:E0:B1:A2:E7:6E:24:C8:AC:D6:FD:D1:8E:79:9C:CC:67:55:13:60
Certificate issuer: /CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
Certificate serial: 010D0C9F4328584930DE6B52CE606F6BF1185A80
Authority key identifier: D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 32787
IP address blocks: 192.169.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:6b:52:ce:60:6f:6b:f1:18:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=af86fc72-5573-4ffa-aa6f-d7cb41f1fbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:9a:a2:3d:f2:33:93:8c:64:43:8f:00:b8:
20:16:84:a7:67:a8:7d:08:83:ef:06:f8:1d:e3:31:
ab:cd:f1:1c:d6:cd:f1:1e:e5:65:9c:38:52:71:ab:
91:78:34:2d:e7:4b:4b:e9:cb:02:cf:f2:ad:d6:e1:
4a:e5:e8:34:9f:08:22:48:b6:11:22:7b:76:5e:a1:
63:20:dc:72:f6:ee:5f:34:82:80:e4:c5:5a:1f:e4:
af:c4:bc:eb:c9:34:f5:c7:f4:0c:37:35:5c:ed:cc:
52:a7:4d:53:27:45:98:12:70:3e:5a:04:d6:e0:e6:
f1:7d:2f:37:9f:ae:e8:62:cf:8a:ef:6c:c1:76:2a:
1b:ab:03:b8:d4:36:67:8d:23:50:a7:29:d9:93:77:
59:d7:3d:b3:00:b2:43:24:93:ba:8c:bd:32:58:95:
5b:59:0c:05:dd:05:6d:98:9b:62:cd:9d:f3:a3:13:
a9:fb:a0:09:6e:8b:3f:cc:98:f0:f3:7b:e4:42:5a:
b0:97:21:e3:26:66:da:e9:f2:96:54:01:78:f0:5a:
47:6e:75:e5:09:5b:86:7b:45:03:3e:52:69:c9:c1:
8f:09:fb:f1:d8:43:ca:2c:d7:08:6c:e3:66:01:d7:
d6:fb:7c:12:80:b8:9f:d2:9e:c6:78:fb:ab:81:f1:
3a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E0:B1:A2:E7:6E:24:C8:AC:D6:FD:D1:8E:79:9C:CC:67:55:13:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl
X509v3 Authority Key Identifier:
keyid:D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.169.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:6a:41:ad:a7:56:3b:5e:a9:dd:5f:48:e8:39:72:4c:94:5e:
75:cb:ab:38:90:9d:85:32:54:8e:16:fd:a3:98:33:a9:3c:32:
47:bd:2c:16:49:ba:41:8c:2d:b3:cc:87:b6:cd:4d:c6:84:da:
c9:ce:e6:63:42:5a:b3:7e:79:df:bc:aa:d0:7e:bc:02:1a:3d:
c3:fc:ed:7a:88:6c:7a:17:2a:a6:f2:fc:76:52:f8:b4:8a:c8:
62:78:f1:18:d2:24:41:9b:95:cf:14:ba:3a:ed:da:a7:44:8c:
59:47:9a:7f:7a:25:45:19:e7:30:5f:64:9f:fa:a9:ae:26:03:
68:a8:0f:3c:3d:39:8e:5b:47:45:1d:3e:e6:12:5f:6d:22:e8:
3e:9b:7d:7f:7d:67:13:2f:e6:1c:da:5c:0a:fb:37:36:20:9b:
3b:d6:12:61:4a:46:4d:9b:f0:1d:66:d1:17:d5:db:1e:12:ea:
27:45:7c:06:ac:cd:7c:98:12:c3:3f:1b:79:fd:60:57:35:c5:
98:1d:32:de:a4:b4:a5:5f:31:de:de:79:6a:4d:76:6d:9e:48:
17:98:a2:c9:d3:55:90:b6:72:23:d7:4f:9f:38:51:6f:30:14:
7b:f3:2c:81:63:a2:09:76:d1:41:72:dd:55:29:34:bc:7b:84:
e3:a2:2f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:13 2025 by rpki-client