Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa
File: 1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa (raw, json)
Hash identifier: 3ZcR4As+CV0inesiQuJiwdLTi5d32tP+c6fpZWO96Ws=
Subject key identifier: 86:9A:5C:95:3B:5D:CC:76:E0:9E:0A:64:A8:19:59:30:F3:2D:98:8E
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E506A60B46239B8EAEEE9A0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.58.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6a:60:b4:62:39:b8:ea:ee:e9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=c040e498-3c14-4886-ae25-64ab53e94891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:c7:a3:ef:87:51:6c:39:38:5c:80:06:36:
5a:dd:c9:89:9c:fd:4e:9d:0b:56:59:9c:bf:41:68:
41:61:4f:ba:ef:99:33:c7:da:1d:b6:0f:8c:14:8d:
4a:74:b2:0e:8a:a7:2c:10:5f:f2:e6:83:42:f0:a7:
98:60:dd:2a:4c:67:18:4b:f8:f7:a9:76:5e:c0:71:
d3:f3:3b:21:1d:76:91:e7:1b:c8:9b:03:0b:56:6f:
74:57:07:ab:c6:58:7f:a1:81:ad:4b:33:79:72:eb:
32:af:13:ca:4e:38:ac:03:f7:c2:3b:b3:c4:9b:39:
89:d7:10:e0:72:51:61:68:d7:4d:db:ab:1b:8d:6a:
1a:16:95:c0:47:1c:66:fd:8c:77:09:24:4a:f6:e0:
34:77:48:e6:0f:3d:58:d8:ed:d8:d4:3d:5e:4d:d3:
19:ac:02:0c:d7:b6:ce:86:6b:27:d1:38:9a:21:b6:
79:bd:6a:2c:d8:f7:4a:04:fb:df:54:0d:25:36:71:
93:7b:c4:2b:18:92:80:0b:43:58:7c:47:51:25:04:
28:6b:98:6d:d0:96:56:ee:f1:c7:9c:14:f8:e6:95:
3e:54:30:e1:54:6d:20:e1:9f:cd:09:1e:43:86:b5:
f7:f8:93:d0:9a:78:85:bd:54:93:7d:92:69:d9:19:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9A:5C:95:3B:5D:CC:76:E0:9E:0A:64:A8:19:59:30:F3:2D:98:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:52:77:a4:13:96:c3:76:1e:d0:9e:6e:b1:a0:62:f3:fd:eb:
55:b5:21:61:83:62:f8:6b:6c:ad:32:b9:b7:ed:08:01:f8:9f:
66:b5:c8:97:08:60:e9:1a:13:f3:4a:f6:71:44:35:cc:14:a9:
6b:74:0a:d7:77:ce:b5:a9:24:94:ac:20:1e:05:0d:c9:83:87:
51:24:d3:b5:8b:95:b5:c4:9b:74:9a:d8:42:41:65:46:5d:4d:
69:6b:d7:6f:16:68:46:69:fc:cd:3c:bc:08:84:ac:52:08:45:
0e:be:cc:3c:5b:04:b9:e8:5b:43:1b:c9:b5:4f:ae:02:d9:87:
2e:f3:3e:48:ae:23:5c:5a:19:38:a8:e6:83:bb:20:4e:ab:05:
81:25:01:e0:13:3c:af:9e:d5:9e:42:c1:51:8c:ed:47:92:08:
e3:e3:94:1c:9a:57:14:29:44:97:74:68:d5:16:8a:39:1a:28:
9b:1f:c0:72:f9:6c:db:c2:81:d8:d0:7d:f7:ea:b7:f1:f5:3f:
ea:f7:16:46:df:a9:40:7a:0b:17:7c:c1:ca:64:fd:b8:0a:de:
39:bf:96:a6:b1:23:87:22:bb:84:d8:a0:0e:cf:3f:d6:cd:10:
12:85:cf:4f:46:97:16:49:53:d6:a7:44:76:32:71:aa:f4:92:
53:a6:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:00 2025 by rpki-client