Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa
File: d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa (raw, json)
Hash identifier: U5327a9wyE5wN26hnQTZaH0qiuyglztoS8y3c//r/n4=
Subject key identifier: D8:2A:B8:70:A8:C7:FA:F2:B0:67:17:87:A5:0A:DC:B3:8C:28:E3:B2
Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
Certificate serial: 010D0C9F432858493C092445C71640D92ED89B00
Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 192.64.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:24:45:c7:16:40:d9:2e:d8:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=4d9fbdbe-a515-4c27-af57-5bd7213c4e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:32:f7:5a:10:1e:ae:d5:8a:f6:2b:c2:56:
5f:2e:78:03:ac:3e:55:f5:2c:2c:ec:45:53:14:e4:
73:4a:ee:de:8f:8b:5a:27:c1:36:55:40:b8:32:f5:
ea:d6:88:7b:7c:ff:08:ec:1b:33:dc:00:c0:f5:1c:
a1:51:99:2e:23:fd:53:87:eb:22:38:aa:f8:dd:a2:
c2:76:c5:c1:5c:e9:14:1e:5d:99:e9:84:76:58:5f:
53:1d:4c:f1:bb:26:6d:6c:ce:51:d7:07:7f:40:13:
d6:94:b7:74:0b:08:fa:19:5c:bf:b9:29:14:cb:b3:
b1:8c:a5:2e:e8:c3:df:20:61:36:eb:21:e5:96:6e:
25:05:98:1b:20:bc:52:86:6b:54:71:39:8c:29:2f:
07:09:ed:69:bf:06:a9:d9:aa:ce:8b:e7:dd:10:e5:
b4:7b:2e:cc:87:3c:dc:62:b0:88:41:d1:1b:0d:58:
26:08:08:2b:91:46:8f:b4:75:63:ed:c9:63:28:2b:
41:7d:b9:fa:80:a6:82:01:a5:b7:f7:73:b7:87:e4:
d6:e9:30:53:5e:ec:5e:40:d0:a5:32:e1:c2:43:f2:
f2:76:95:c6:11:28:66:fc:37:4a:a7:15:8c:5a:30:
62:eb:df:18:a1:d8:62:c1:07:58:8a:00:bc:be:22:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:B8:70:A8:C7:FA:F2:B0:67:17:87:A5:0A:DC:B3:8C:28:E3:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl
X509v3 Authority Key Identifier:
keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:0e:c0:94:41:0d:85:33:e4:46:4d:52:3c:dd:38:e1:58:b4:
1e:72:6e:4b:91:d9:eb:e4:8d:62:98:e0:86:88:89:85:f5:86:
3f:5d:90:77:4e:c9:a2:fc:79:03:cb:bf:5f:7e:05:a2:b5:83:
40:77:50:73:0a:bf:75:b5:66:cf:4a:29:0f:94:c7:00:07:94:
ef:c5:0b:f8:1f:df:9c:c4:a7:25:f9:27:11:72:0c:cc:3e:bf:
f1:fd:49:0f:0c:c7:4f:2b:af:53:43:89:71:ca:09:8e:2e:a6:
2d:11:80:6f:aa:3c:27:85:d1:3d:da:74:ce:07:ff:5c:4a:43:
be:98:4d:c1:4b:9d:18:52:c5:9b:54:8a:55:df:9a:2d:fc:b1:
ef:e1:65:5f:b3:42:6a:21:71:d4:9f:00:2a:31:6c:ef:e8:54:
70:3c:76:0b:25:99:89:02:6a:d3:ee:83:30:61:05:5c:ed:62:
be:07:12:86:a4:0a:45:9c:90:dc:90:14:5b:5c:42:34:83:39:
37:11:35:b9:0e:43:56:1d:4d:c9:c1:65:db:37:e6:47:0c:70:
c3:73:72:20:77:26:1b:d0:74:e3:d2:d7:41:df:d9:46:fd:a6:
57:a2:0c:46:4f:a4:60:e7:4a:ca:a8:2f:f8:ee:f7:94:7b:01:
9b:b2:65:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:08 2025 by rpki-client