Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa
File: 4733c78a-74b2-36ce-8265-e75f07c9798e.roa (raw, json)
Hash identifier: kKvDmWdOCF9Z8dWiVefLkF2DombY5yqP78UIp/EyyIc=
Subject key identifier: 99:A0:E7:2D:41:B8:0F:68:4E:F0:2E:E8:9B:6C:B0:87:D3:41:34:0C
Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Certificate serial: 010D0C9F43285848F65BD3BDEE0DF67FC3694280
Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 16509
IP address blocks: 192.175.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d3:bd:ee:0d:f6:7f:c3:69:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=23222904-f876-41f8-807d-b12ff7b85cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:64:78:b2:a6:d7:48:83:9e:70:16:ff:a1:
a5:8f:c4:04:32:f7:20:15:3a:c8:05:b2:47:95:35:
c0:c7:b6:3d:03:33:68:74:45:68:be:78:a2:5b:72:
ed:3f:91:40:85:3a:d1:c1:f5:08:0e:e8:8d:2d:24:
6c:57:1b:18:d3:65:06:cb:6b:ee:3a:29:33:e2:17:
27:d5:51:48:b5:30:75:42:77:46:43:ab:40:5d:02:
67:7d:32:12:cd:41:11:85:f6:d8:b6:6e:02:13:16:
7d:c1:97:fa:b8:67:96:80:4e:b5:cd:94:aa:b2:06:
be:ac:db:22:97:40:40:8b:a8:d6:c3:9a:a5:f4:22:
77:d4:d7:32:21:d5:38:8d:1d:74:85:38:df:17:8e:
af:15:5a:eb:c4:aa:a6:f8:eb:f8:d9:04:52:16:22:
28:02:01:d8:d0:b9:c6:5f:79:6c:aa:a4:ed:1f:19:
26:c6:8e:7c:25:a3:37:f3:0e:5e:e5:91:19:df:f6:
05:71:53:b5:5d:0d:b0:f0:b0:02:c3:81:76:d9:e3:
32:21:fa:3d:1d:87:26:f9:0a:c1:98:18:3f:26:8c:
51:1f:66:6e:a0:6d:61:d5:aa:b1:55:76:36:ab:fe:
77:9e:63:fa:18:d3:f0:e0:db:10:1f:80:86:ce:88:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A0:E7:2D:41:B8:0F:68:4E:F0:2E:E8:9B:6C:B0:87:D3:41:34:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl
X509v3 Authority Key Identifier:
keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.175.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:e8:48:f0:3e:a7:61:e3:4e:2c:1e:7b:20:34:f2:1f:27:c9:
ed:eb:e7:3b:00:cd:a4:d8:58:04:2c:7f:c8:52:29:b6:b4:ed:
6e:df:d0:e1:ca:1c:87:67:aa:4f:4d:95:9f:1b:7c:f4:94:19:
a0:6e:72:7b:dd:aa:07:93:80:a6:0a:a2:a2:d9:ea:0f:73:47:
9c:33:10:7e:66:b6:b2:9d:9a:33:cd:ec:6e:b3:f9:0f:6a:4a:
ca:42:64:f6:e3:fa:92:e2:05:72:71:e4:56:88:d9:b2:85:1a:
53:75:c8:90:dd:d0:b1:ef:c6:bd:79:0e:4f:22:48:12:fd:f6:
ea:09:5a:e8:79:67:0b:d2:15:a2:e4:09:e7:7f:58:ca:7d:81:
bd:0c:73:df:af:e4:6b:89:ba:94:fd:49:ff:db:e1:0c:af:29:
b7:b8:13:2e:56:b5:38:c6:ee:ef:f8:9a:6a:07:68:07:ad:d6:
cf:f9:96:79:ad:6b:15:89:06:1d:eb:cc:66:9b:3d:d7:7b:cb:
0d:6c:ef:fa:37:69:2f:17:32:be:93:01:3e:b2:66:e1:77:e8:
5d:24:10:e1:4d:f4:82:a3:e0:3a:15:e2:bc:5e:00:43:3f:37:
96:fb:c7:6c:58:a1:26:6e:25:eb:01:f7:10:25:69:eb:65:de:
f0:33:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:24 2025 by rpki-client