Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/82175cd9-89a7-369e-9868-aa7d354cac36.roa
File: 82175cd9-89a7-369e-9868-aa7d354cac36.roa (raw, json)
Hash identifier: DYHONhcIi6mtqxBsA+/nEPSagRRCRo6iM4gou2KxjAU=
Subject key identifier: 99:16:42:B1:BF:67:B2:05:B1:E4:98:55:00:10:37:A1:70:AB:7D:C8
Certificate issuer: /CN=45c66754-6161-4548-b519-3f3f38d6030b
Certificate serial: 010D0C9F43285848D7A64DBC93D22FE6B4058580
Authority key identifier: 73:4A:E2:1F:5C:28:AF:8E:91:9A:0D:39:7E:F4:21:94:35:3C:38:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/82175cd9-89a7-369e-9868-aa7d354cac36.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 192.64.236.0/24 maxlen: 24
192.64.237.0/24 maxlen: 24
192.64.238.0/24 maxlen: 24
192.64.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:4d:bc:93:d2:2f:e6:b4:05:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c66754-6161-4548-b519-3f3f38d6030b
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=409c50e1-7f75-4f32-8a08-29a39c32d383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:9b:2c:f4:a0:c3:43:52:d7:e4:af:56:e1:
be:b4:00:fb:89:2f:50:c8:1c:ea:4c:29:4c:70:a4:
fc:d6:8f:d9:50:a0:49:fd:86:ac:aa:4b:f3:9f:c9:
71:70:af:66:f2:4a:8f:d9:25:72:66:bb:a6:27:86:
fb:04:f8:f7:5f:a6:b0:eb:ff:b3:54:0d:0b:15:1c:
c0:9b:c4:01:a0:e0:4b:ea:ea:2d:3c:a3:56:7c:45:
34:45:31:9b:5b:4a:ee:e0:9f:ab:7d:b1:04:00:76:
63:e7:09:2a:d0:2b:b8:68:b0:33:d6:30:9e:2f:97:
1b:25:ac:c5:48:22:e1:9b:27:77:8f:15:f3:6a:a6:
39:71:64:5d:ad:b7:04:46:42:0f:93:ee:a0:1f:9f:
1c:3b:fc:3a:6f:20:8d:f0:b0:e7:85:a1:bd:50:3b:
4d:9a:10:09:0c:39:06:f8:9b:c4:f4:f1:57:91:d3:
14:ed:27:28:94:b5:ee:72:d7:1e:07:6f:8f:f8:31:
c0:11:37:e7:86:42:05:fe:94:06:bd:5c:f5:10:8c:
1a:6b:a4:cc:68:a1:e5:8b:40:04:84:90:c0:a7:20:
ec:e4:9e:8a:de:4d:cd:58:16:d3:3e:9b:ff:37:29:
d4:24:3a:5c:66:60:ce:92:d9:2c:b9:c1:1e:53:d8:
80:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:42:B1:BF:67:B2:05:B1:E4:98:55:00:10:37:A1:70:AB:7D:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/82175cd9-89a7-369e-9868-aa7d354cac36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.crl
X509v3 Authority Key Identifier:
keyid:73:4A:E2:1F:5C:28:AF:8E:91:9A:0D:39:7E:F4:21:94:35:3C:38:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:41:6c:f2:eb:13:fc:0f:05:2a:b8:1e:5c:0c:99:be:b9:9b:
c9:76:00:e2:4c:fa:21:91:d2:9b:42:24:ac:60:f2:90:9f:b8:
49:e4:32:20:b1:02:9b:cf:bf:d7:c9:d1:e3:c4:15:b6:e1:00:
ef:08:c6:25:5a:2f:26:38:67:e7:fc:4e:43:5e:25:70:b1:52:
6a:3e:ac:7c:d8:04:3d:3b:e3:a8:e4:51:d5:b6:5f:7c:d0:de:
78:72:d5:67:cd:be:fc:e0:d0:b4:df:9a:75:ec:b6:ae:28:09:
3d:a8:2d:58:21:7b:35:c1:28:fc:9d:54:dc:0e:e1:92:04:79:
24:9a:57:c9:c9:11:79:a9:b1:bf:8a:66:c0:9c:f7:57:69:c2:
54:23:d1:f9:6b:de:9d:e3:c6:65:e3:cd:48:89:b1:37:d6:57:
23:21:5c:0d:42:b1:9a:1d:9e:9e:35:b8:ce:e1:77:c5:af:6d:
f3:53:e0:d9:bd:82:6c:21:4b:e2:e5:50:f5:d6:f6:7a:2f:6e:
fc:1e:9d:ce:72:53:f6:3d:e8:c8:98:04:4c:42:3e:63:8a:30:
4a:e7:27:17:04:a1:2a:d1:b6:c8:53:5f:79:46:f0:4e:a3:87:
23:43:81:55:81:7b:24:1e:17:55:af:ba:f7:61:e5:da:dd:fc:
ea:67:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:03 2025 by rpki-client