Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa
File: 0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa (raw, json)
Hash identifier: PAu/nDiWV9Fzc5JV8JzbUWdGVhfUNK6X8042lE5Fvew=
Subject key identifier: 39:2C:A6:06:A7:87:C0:C2:AC:80:DC:5B:58:AE:CF:FE:B0:9F:FC:50
Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial: 010D0C9F43285848C84BA1886BBBE333C3727200
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 16509
IP address blocks: 168.225.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:a1:88:6b:bb:e3:33:c3:72:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=7fe9911b-e426-429e-9045-7d5f7eb6c420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:ad:81:3b:e8:15:6e:55:29:ca:68:c2:cf:
16:23:b9:dd:16:22:c0:f4:7f:3e:e7:2b:4b:70:db:
94:3b:a7:b6:92:e7:6a:e4:f9:77:89:3a:4c:8d:da:
da:6d:35:35:e3:7b:dc:da:49:1f:c4:b5:f9:78:98:
b2:2f:57:ad:df:c6:be:ca:06:f6:cf:b0:37:6e:b7:
8b:79:ea:62:ea:79:74:90:5b:02:81:a3:95:af:9e:
09:45:17:0e:ac:4b:59:e0:b0:86:46:56:9b:58:89:
bc:c5:59:96:36:a4:4c:a0:f1:b6:71:18:c6:9e:5e:
33:d9:be:f3:a3:8f:5f:6f:a4:80:63:93:c9:d2:5a:
3b:7c:c5:05:9b:ca:22:e0:10:40:ba:a9:f7:ba:37:
69:cb:a6:44:83:9a:92:18:e7:5a:a3:12:2e:6c:28:
d3:d1:99:ad:2f:b9:09:dc:6b:96:43:96:39:4d:36:
fa:19:62:dc:ab:e0:bf:98:ef:db:73:e9:1d:f3:5c:
98:d5:a1:2b:bb:60:66:3c:7e:e5:50:57:f5:a5:ec:
13:0c:45:1d:a4:c1:2b:24:d8:3c:58:96:7f:f9:55:
ff:06:99:03:84:0c:5b:16:0c:5b:38:c3:66:3e:ec:
1a:e7:00:2f:e4:da:00:90:91:4e:f7:e0:cd:a1:21:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:A6:06:A7:87:C0:C2:AC:80:DC:5B:58:AE:CF:FE:B0:9F:FC:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
X509v3 Authority Key Identifier:
keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
sbgp-ipAddrBlock: critical
IPv4:
168.225.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:93:0c:57:e9:42:b8:34:bb:56:bd:13:9a:79:a5:8a:5b:f8:
b6:6d:e3:3c:57:2a:92:fa:cc:5e:51:22:d4:52:5e:1f:c2:90:
6a:8d:62:4b:2a:af:88:ac:8b:46:a2:55:d3:4f:e5:28:ed:00:
e9:79:b0:a7:44:7f:5d:b7:bd:22:11:17:0d:b6:f1:74:22:c4:
a5:d5:de:5d:df:ba:28:43:82:d3:55:81:d3:56:5a:02:5f:b4:
14:bd:25:3f:a7:32:fb:a9:ab:7d:8f:25:3f:28:02:41:d3:87:
42:16:21:7e:9c:a5:e1:be:15:e1:2b:8f:aa:9b:4f:aa:22:c7:
59:3f:ad:d6:8a:98:aa:29:7a:fb:22:cd:8e:5b:0a:a9:62:62:
31:3d:37:02:49:dd:9a:3d:52:17:00:96:5b:24:d3:e2:b7:9c:
10:45:90:c8:e1:85:d6:cf:c2:c9:f9:cc:1c:f4:2a:6c:76:41:
aa:71:7f:f9:09:5f:48:0a:3d:8f:40:04:6e:28:26:91:47:77:
9f:11:52:87:d4:ad:3b:f0:8f:9f:b9:c3:a8:f8:cd:12:a1:f0:
01:54:43:ec:5a:80:14:b6:40:b0:a9:1f:a2:1a:1b:af:58:3d:
ea:39:4a:57:44:a8:0e:32:2a:50:9e:9b:f5:ce:1f:88:78:38:
a7:12:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:36 2025 by rpki-client