Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/94b919d1-b053-3e4c-8ada-5c10fb23217e.roa
File: 94b919d1-b053-3e4c-8ada-5c10fb23217e.roa (raw, json)
Hash identifier: 5Q04zkMfEoovKAmbyL8T2SlxqcOI8KSIu7C7SkTSGOY=
Subject key identifier: C1:48:3C:65:80:76:00:02:BD:36:FB:C6:98:92:39:8E:9E:C7:8D:4B
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E5066D9932C5EE58A48CA40
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/94b919d1-b053-3e4c-8ada-5c10fb23217e.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.58.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:66:d9:93:2c:5e:e5:8a:48:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=babafa00-a3d9-44ba-9f3f-88e03c35d017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:f9:97:9b:12:0f:56:58:98:1d:2a:2c:86:
87:23:b0:fa:a1:72:62:89:66:3b:cc:98:22:16:36:
36:ae:94:8e:5f:d1:c5:60:72:fb:70:ff:91:eb:6c:
bb:60:df:09:09:0c:78:54:9c:9b:c6:3e:32:96:3d:
46:21:de:d1:c4:bf:e6:18:6b:55:8d:87:49:1d:5d:
1e:83:79:0e:da:f0:15:86:36:14:9d:e5:0b:5c:87:
86:80:74:c2:b2:2e:2f:0b:20:be:59:01:21:08:d9:
46:ac:cb:8a:f2:18:85:7c:9c:09:e3:f4:f9:74:a5:
9a:88:76:cf:d1:4b:2d:ae:43:0d:ea:83:fe:93:df:
ed:23:12:b2:eb:e5:9b:78:90:44:39:01:ad:a6:3c:
87:47:ac:47:a3:83:28:dd:23:65:f9:6a:d4:8e:a2:
fc:1d:f3:78:9c:b3:a6:77:75:3f:0c:d0:b5:4c:c7:
90:42:3d:1d:4c:c6:4f:38:2b:ee:db:5d:52:ad:b8:
aa:c7:95:c8:c4:16:e9:2c:40:0f:f2:ce:5d:21:12:
4f:4c:ca:47:ed:36:19:f7:51:9a:dd:d7:be:90:53:
57:b1:cc:90:4b:fa:a7:f5:26:89:28:92:e0:9d:b3:
31:3a:cc:e9:00:47:83:c5:e1:58:70:3c:ad:21:ce:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:48:3C:65:80:76:00:02:BD:36:FB:C6:98:92:39:8E:9E:C7:8D:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/94b919d1-b053-3e4c-8ada-5c10fb23217e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:70:ee:a1:e6:31:10:b9:4e:7b:1c:15:38:53:4d:98:9a:50:
7c:2b:9b:f5:9f:08:a8:3e:e3:2a:95:2c:02:a7:1a:22:69:18:
e4:7e:48:25:a3:16:5e:ec:1e:15:bc:b3:51:96:98:6f:a9:3a:
3b:d0:3c:c2:b1:1b:44:4b:30:aa:35:56:39:fe:16:be:83:03:
9b:2f:1e:26:66:08:d3:6e:d3:1c:d8:5c:04:0b:e5:89:02:e9:
d9:7c:03:1e:ba:03:c3:ba:64:ad:09:e3:1c:53:e1:fb:2e:98:
30:b3:cb:e5:cc:96:f1:70:51:34:4a:44:f7:01:80:cd:5e:1d:
c7:1e:68:39:3e:ad:70:f0:19:50:b6:db:ee:3e:48:16:7d:74:
d1:16:d0:cb:a3:e6:7e:c9:b9:ee:3d:de:58:1e:6e:c1:87:cd:
ae:a5:3a:2b:7e:dd:a6:10:5d:24:26:c0:b6:e8:24:da:34:77:
e4:e1:8b:ad:24:cc:79:8c:0d:16:d8:9b:a7:65:ad:33:8e:9d:
f6:cc:e0:68:89:71:54:1a:e9:c1:20:b1:71:30:54:8e:4c:d9:
36:1f:f6:8d:24:d3:3e:6f:57:e5:07:34:be:c0:bf:57:df:12:
93:08:9c:6d:24:b2:76:aa:ea:e0:36:e1:59:9b:c0:9d:c9:cf:
7c:73:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:58:20 2025 by rpki-client