Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa
File: 2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa (raw, json)
Hash identifier: jQXpflJsXF+n0CnAeJ5iemNxeSKkoWYmQsCXKROVMjM=
Subject key identifier: 75:65:8F:D0:EC:97:27:A0:0F:14:E6:F0:59:F7:C1:C7:4B:8E:59:52
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F4328584953C414FD34975BEE30485880
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 0
IP address blocks: 192.129.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:14:fd:34:97:5b:ee:30:48:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=75ed4ed6-18e6-4c29-ae93-4910e844fd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:a7:be:9d:60:5a:b5:14:f8:86:10:c6:28:
8d:1e:d7:65:6c:3b:1b:ac:87:a1:99:1f:09:a3:f9:
58:9c:c0:15:55:6a:ff:59:6a:f6:ce:14:04:cb:74:
9b:0a:ca:06:af:94:a6:10:48:a3:06:65:53:0a:0d:
a1:e5:3c:cc:ba:d0:d3:c9:6e:f6:f8:a1:a9:e1:d1:
b8:8b:1d:97:6a:bd:3c:48:66:ea:33:2b:58:d9:05:
c2:a7:b4:bb:0e:54:c9:2e:7b:92:57:60:88:5c:c4:
24:64:ae:6c:1f:a9:84:c7:d0:51:6c:9c:33:58:20:
5d:60:77:54:db:8b:f3:39:0a:37:a0:f9:06:c3:86:
80:b7:ba:a7:3e:17:ce:b4:c8:5a:f3:dc:e8:ae:8c:
0b:36:f7:8b:42:cb:f2:8e:4f:d2:ef:d4:ad:82:f5:
cf:98:75:db:ae:51:c3:17:e4:7b:66:c5:be:2b:d8:
22:b5:cf:19:3f:fd:b7:08:a8:27:72:92:b5:cc:85:
86:1a:aa:f9:ff:f8:36:8d:38:40:b4:a5:79:f3:93:
50:fb:79:3c:6e:d3:54:9a:c9:cf:01:57:be:24:48:
af:ce:da:4c:9f:94:26:fa:55:4c:27:54:44:52:f0:
00:5f:ee:b9:61:1b:d6:07:f5:72:ef:c0:90:25:e1:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:65:8F:D0:EC:97:27:A0:0F:14:E6:F0:59:F7:C1:C7:4B:8E:59:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.129.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:77:fa:e7:8b:2a:fb:97:0b:af:9f:01:c2:a3:43:52:1b:67:
42:02:04:87:16:39:82:c1:fc:37:fd:59:0d:27:c5:b2:72:da:
04:56:bb:6d:0d:d0:90:02:b0:15:e1:49:31:46:26:16:e2:18:
df:31:4e:9c:59:f7:bc:61:62:e2:c9:65:42:02:f9:16:ae:61:
1c:62:db:38:87:43:d2:ec:32:ce:8a:c6:b6:d0:0b:53:82:c1:
0a:94:b7:76:21:af:d1:36:1d:99:3a:80:ec:2b:66:a0:44:cb:
ac:80:d1:5c:95:82:70:b1:3b:63:e2:dd:71:a6:66:4c:5f:32:
25:77:e2:46:6e:fb:2c:ec:3e:37:20:07:f8:50:84:12:72:2a:
49:10:05:aa:c0:ec:e8:de:32:55:2e:60:5a:8c:24:9c:f5:f1:
37:c9:64:50:41:8b:70:c5:7b:9d:0a:76:27:47:77:4e:8c:18:
a5:d4:fe:e2:7e:31:64:01:1f:51:6d:3b:9b:98:59:cc:58:3f:
09:cc:b9:09:58:65:31:2b:d3:88:e0:85:0e:4e:e8:dc:82:ad:
cb:43:c4:17:9f:ba:6e:af:ca:9a:2d:b4:50:35:f1:e7:64:4e:
78:7f:54:14:59:de:75:9f:65:f7:ac:02:e4:d8:a2:e5:90:01:
5b:91:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:32 2025 by rpki-client