Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/99e6d754-302a-3816-ad72-c84533ece029.roa
File: 99e6d754-302a-3816-ad72-c84533ece029.roa (raw, json)
Hash identifier: Fe5x/+NerUpjn3wSjPdz9bjzanYZkFLXIBonOOdZv/w=
Subject key identifier: CE:52:F4:49:C7:6D:91:DB:6F:90:6A:DE:2F:50:2F:77:88:FA:A1:D2
Certificate issuer: /CN=1a6caf55-a53e-446e-9958-ee41f172c88f
Certificate serial: 010D0C9F432858489A3B429080CB7D83D0AE99E8
Authority key identifier: 10:DF:30:B3:02:46:F3:B0:F2:8A:50:08:46:67:1D:3E:5A:E8:44:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/99e6d754-302a-3816-ad72-c84533ece029.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 16509
IP address blocks: 192.112.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:42:90:80:cb:7d:83:d0:ae:99:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6caf55-a53e-446e-9958-ee41f172c88f
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=a4afb8ae-fb8f-4dd6-a1bc-1a4927c09dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:95:c7:fe:e7:13:13:7e:61:62:ea:56:9d:
81:e4:70:8e:13:22:9d:bf:a1:71:e7:5c:ea:7e:81:
47:b1:30:8d:5a:dd:2c:55:47:be:94:53:9e:d6:00:
0e:86:d6:9d:56:66:53:52:52:9e:cf:5f:97:f8:ce:
9e:cf:e2:42:19:a3:17:60:a8:3e:2f:74:c4:98:9e:
a1:96:18:38:fa:9b:8a:85:77:95:f2:cb:68:24:b9:
f6:0c:77:ab:7c:49:8e:77:33:00:95:fb:c9:8a:62:
75:7e:f0:c9:d0:d2:73:57:61:6b:4b:89:79:1e:45:
c9:17:44:47:f6:51:08:60:95:e0:d0:11:48:36:44:
c8:8a:e6:51:74:c6:4c:c8:25:db:d6:2a:46:21:1b:
78:af:3c:bc:bc:03:12:d1:10:c9:1b:64:15:4c:ba:
9b:e3:fc:9d:17:fa:b3:6b:84:4e:8b:58:72:c4:cf:
a2:c0:a1:7f:bb:1b:e6:02:02:71:24:0e:2c:fe:f3:
f6:47:5f:59:2f:98:8f:4b:97:52:50:7a:87:84:86:
f0:50:77:9e:c6:c4:f7:bc:5b:a8:c9:81:f5:12:9e:
ec:cf:08:c2:87:31:5d:ec:17:05:b4:23:81:5c:85:
27:f2:dc:76:47:c1:8c:a7:b7:17:18:eb:db:4f:a2:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:52:F4:49:C7:6D:91:DB:6F:90:6A:DE:2F:50:2F:77:88:FA:A1:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/99e6d754-302a-3816-ad72-c84533ece029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.crl
X509v3 Authority Key Identifier:
keyid:10:DF:30:B3:02:46:F3:B0:F2:8A:50:08:46:67:1D:3E:5A:E8:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.112.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:7d:76:2b:38:69:41:a9:44:39:2e:0b:6c:ce:f4:29:88:72:
03:d8:7f:4c:97:50:4b:cd:2e:14:40:04:47:f2:28:45:18:6b:
55:26:ea:ab:5e:21:cd:4a:f7:b9:d9:6b:ba:ee:ce:fd:18:d1:
bb:9d:d7:1c:b3:05:37:0c:34:6a:ee:8c:64:a1:b1:66:b0:74:
01:13:d2:0e:5c:3c:5c:cf:4d:d8:ea:77:d4:ba:a1:48:fd:d9:
5e:25:bb:a4:35:90:7d:ae:93:e8:77:10:7b:ce:ca:9d:ac:64:
09:17:bf:00:aa:4c:d6:2e:29:22:a5:97:41:bc:51:9e:7b:48:
48:e8:22:d4:40:b2:18:a0:73:e9:b1:8a:a4:ff:ef:86:7c:20:
a5:da:0f:7e:93:22:17:64:6d:71:c9:cd:ef:a5:e9:5d:5f:cc:
70:85:d2:55:d5:57:0b:78:13:b4:c0:4b:9d:c3:38:e8:d6:35:
19:90:67:42:65:50:f8:65:40:44:d7:86:b3:d3:4e:7a:e0:9d:
58:eb:e9:d8:3b:25:6f:b4:d9:9c:4a:22:11:c3:e7:33:06:c1:
c5:c3:cc:59:ed:c3:d6:0c:c1:2b:65:19:3f:c7:b8:7b:77:2f:
27:75:05:f8:cf:08:bc:89:f6:ab:23:19:93:6f:aa:a0:ec:9d:
5e:e3:ff:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:51 2025 by rpki-client