Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54d8f80c-5c3e-33e8-9ad2-cf5d52d21337.roa
File: 54d8f80c-5c3e-33e8-9ad2-cf5d52d21337.roa (raw, json)
Hash identifier: Aau9pw/kUFGyhk6UoTvZ9lWnK96YyrdWsuL8JsBkXBc=
Subject key identifier: AE:CC:64:BF:10:23:5B:54:5B:F2:B5:36:26:8B:70:E5:47:18:B3:3A
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848EF613E6E06E452528D924980
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54d8f80c-5c3e-33e8-9ad2-cf5d52d21337.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 202
IP address blocks: 192.46.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:3e:6e:06:e4:52:52:8d:92:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=167b56e5-00e2-4366-99e4-bef17fc8ac0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:ee:b8:29:95:6d:5e:fe:29:90:2f:47:33:
19:20:a1:72:70:e6:b0:6b:64:2d:52:b4:00:dd:dd:
5e:14:ac:93:63:3f:5d:1e:72:64:9a:7b:e5:a2:af:
d0:69:bf:3a:38:77:fe:4b:86:37:ad:77:50:cc:7a:
ba:39:bd:ed:ea:74:30:79:96:bf:9c:fd:35:31:af:
2f:d6:ad:dc:2f:bb:ff:cc:02:f9:56:56:d9:88:7e:
30:62:48:c0:0b:64:c9:35:92:ca:9d:f8:87:fb:71:
da:0d:92:d2:98:d9:fa:e8:44:d6:da:74:e1:dc:9d:
92:e7:6f:a6:64:27:cd:2c:97:52:e4:34:40:5f:1f:
3b:7f:91:53:51:50:c6:0a:22:68:c8:2e:79:7b:9b:
68:3a:cf:9f:1e:79:58:ea:79:19:0a:45:7a:c9:1b:
62:d4:c9:c5:3c:01:5a:1f:08:f9:fe:46:9e:b9:ce:
a4:e1:37:e8:ef:6b:fd:76:55:b8:9c:07:26:d6:83:
ea:29:7d:ba:9d:2b:a8:aa:58:36:8f:80:69:4a:9b:
b5:8e:00:b7:94:e2:1c:f7:d2:37:a9:0d:56:20:49:
d4:d5:1f:84:eb:ac:a3:0f:09:78:a4:6b:ea:48:87:
a7:72:1e:62:0f:35:4a:6f:fc:bf:46:34:88:bc:4b:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CC:64:BF:10:23:5B:54:5B:F2:B5:36:26:8B:70:E5:47:18:B3:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54d8f80c-5c3e-33e8-9ad2-cf5d52d21337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
192.46.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:b9:29:cb:ac:cc:c0:ed:4f:65:73:1e:cc:db:67:c3:7b:09:
5a:4d:8c:c2:39:18:65:b6:f5:78:2f:3d:4b:9e:74:5b:81:3f:
57:87:50:37:b8:70:fb:b2:0c:91:60:9e:dc:8d:5d:a9:3e:ad:
23:c9:23:f9:cb:4c:80:6a:77:93:d1:f9:78:e3:ad:18:d3:92:
17:b8:75:1a:e6:31:3d:63:91:f1:19:d2:cb:5f:d2:20:33:f7:
4a:48:9d:e4:b4:13:7b:11:86:2c:26:87:8b:d1:d1:32:06:25:
a0:4e:d1:83:e2:d0:22:ec:c7:74:bb:e3:85:7a:db:36:fb:0b:
79:c8:61:ca:1d:b7:bf:38:90:13:a2:76:ee:e2:0e:19:3b:fa:
65:7c:c7:22:fe:59:4b:ad:84:ad:70:5b:5e:21:1f:6a:db:c4:
dc:49:30:d7:c9:f0:28:0b:96:a1:e6:5d:21:e0:54:fb:50:cb:
d8:5e:18:7d:ef:28:9b:19:47:68:08:81:f4:6a:de:e2:6c:46:
73:31:5f:c3:8a:54:23:b8:41:69:0a:fc:15:71:45:be:f8:55:
80:ad:9d:7b:9f:5d:41:f4:f5:5e:71:e3:7b:cd:9c:fc:3e:6c:
c2:9c:a6:a8:6b:da:ea:40:89:4d:98:a0:73:89:87:0f:59:7b:
b8:e5:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:46 2025 by rpki-client