Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa
File: 6bb9aaee-b794-32ef-9cbe-5db764601630.roa (raw, json)
Hash identifier: nzkNXwHU48ldXT5b1pE/15sxyazcffN7pwpTYlf3V7c=
Subject key identifier: 9C:D3:41:65:8E:BA:5C:23:FB:30:18:F4:12:D9:44:55:52:9C:85:6F
Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Certificate serial: 010D0C9F43285848EF6138121B11B5D0DB6ABF80
Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 192.190.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:38:12:1b:11:b5:d0:db:6a:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=d567b4da-0325-466b-81ca-bf542a1f9b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:03:bb:11:1f:26:08:31:22:21:08:76:51:8c:
0e:7a:3c:ef:07:f0:ac:a8:95:5c:80:22:18:c8:c6:
b6:4c:d3:ca:d0:8e:5f:04:3c:7b:3e:8a:4c:16:c7:
4a:2d:b4:f2:3f:c8:3e:7b:10:51:cf:93:b5:a3:e1:
e0:4a:85:50:bb:48:1d:c0:eb:d4:fe:99:55:ac:94:
9b:89:51:55:05:b8:1d:3f:e3:a4:0f:a2:67:6a:cf:
3a:8b:3c:c8:cf:2e:44:6d:60:44:d6:bb:ac:e1:82:
26:41:1b:56:fc:cd:d5:ae:1c:93:26:15:74:9a:4e:
06:cd:f1:3d:36:9f:14:9f:94:36:ae:24:67:01:1a:
e9:15:90:ae:25:34:f0:07:3a:95:ab:a1:fd:78:ac:
8f:41:69:2d:43:17:f3:77:cb:40:e7:d0:37:22:a3:
b2:28:a2:4c:f2:ba:14:22:6d:ea:b2:92:97:92:4b:
e6:3f:fe:8e:d3:aa:f5:bb:48:67:f0:fe:58:0d:0e:
dc:a0:d7:6e:29:a9:a3:4c:61:d0:c3:01:85:73:f1:
17:80:5e:f7:21:e4:b7:9c:ce:b5:b2:ec:ee:dc:23:
91:3e:f2:a8:20:a6:9b:25:c9:f8:17:5a:57:e4:a7:
60:46:e5:28:fb:46:33:25:97:11:ee:84:68:2c:da:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D3:41:65:8E:BA:5C:23:FB:30:18:F4:12:D9:44:55:52:9C:85:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl
X509v3 Authority Key Identifier:
keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.190.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:a6:3b:95:d6:a7:3e:7f:35:d3:1a:c9:30:76:e7:f3:32:4c:
4e:50:54:87:06:fe:a5:8c:11:91:fa:01:b2:02:7f:4b:4b:e4:
0b:9a:03:b9:19:f0:08:2e:ab:a3:5b:24:54:e3:58:30:6c:10:
c3:d4:d0:cc:e3:10:3a:9b:cf:68:77:a0:a6:35:45:f5:79:ae:
0c:b5:7e:fb:a4:cb:fa:54:b5:f0:5f:dc:9d:ed:c9:ee:0a:cf:
c6:40:08:f6:65:2f:56:d2:00:2a:e0:8a:e9:16:a5:bb:3b:3e:
31:cd:d2:a7:b8:07:f5:7d:2d:2f:33:f1:75:74:0b:ff:86:d5:
17:32:8c:81:d3:a1:3c:df:5e:4b:3e:97:58:6c:b5:a5:31:05:
a5:85:86:1b:3a:f1:a3:ce:c6:d1:c5:ad:66:71:00:51:a4:7c:
be:88:db:8d:c5:5e:ed:2e:31:b1:32:d7:ef:e4:c2:9e:e1:43:
1e:e0:8e:b7:e0:57:81:61:57:66:53:f3:dc:4a:34:31:91:b1:
ff:27:b1:fe:f1:2e:5c:68:ed:2f:c8:21:29:52:b4:7b:8c:7a:
90:35:1b:1d:c9:89:a4:2b:ef:72:65:19:c4:d5:70:73:40:e7:
52:57:c6:13:a2:bb:23:d4:09:84:4a:41:7a:c3:ea:81:11:6a:
f1:8a:91:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:06 2025 by rpki-client