Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac585e90-de97-3a5e-9981-425e5a740608.roa
File: ac585e90-de97-3a5e-9981-425e5a740608.roa (raw, json)
Hash identifier: /KCZIlQk4X0Og6ar0/kjFfqn9NLshPjzqMb2Iq/vNMI=
Subject key identifier: 19:66:C5:B1:0B:C1:E3:60:F3:0F:17:9E:C4:62:1A:56:84:19:2A:92
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F4328584953C415277688E4E0A26161A0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac585e90-de97-3a5e-9981-425e5a740608.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 0
IP address blocks: 192.195.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:15:27:76:88:e4:e0:a2:61:61:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=5dff3eb6-eba0-429a-95a8-708263456b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:45:5d:9a:03:f0:a9:0d:12:e5:d6:2b:df:
75:82:d2:5b:ac:8b:6e:34:61:90:31:56:53:60:d3:
64:47:22:96:ae:54:40:c7:7d:6c:c0:9b:dd:0d:7b:
30:a1:8d:56:bf:75:37:9e:cb:d4:4b:8b:ec:98:c8:
74:b7:5b:b1:b7:11:2d:9a:ae:2c:9d:4c:46:67:25:
6b:9b:5b:ad:0f:f9:ff:47:b1:40:d9:dd:78:9b:27:
8e:ce:a9:0d:9d:43:b0:74:29:85:27:26:0f:fb:e8:
11:a5:75:84:d6:11:fa:ff:40:67:f3:7f:48:47:a9:
22:76:6e:bf:95:05:f7:ba:84:99:07:6b:1f:cb:de:
fc:de:38:2d:bd:e0:fc:e1:b8:16:58:09:cb:2b:51:
eb:29:0f:ad:45:27:76:f3:84:37:ef:94:37:d8:16:
2a:55:45:85:92:f7:6e:af:89:70:06:05:b2:c8:94:
f9:9d:7d:a5:4a:bc:47:e1:88:bc:21:a1:b4:26:b8:
57:19:73:48:3b:dd:e7:07:fe:54:1e:f2:c9:8c:96:
65:b0:41:a7:56:81:cc:94:28:d0:22:6d:d0:33:c3:
32:85:4d:44:2c:7a:a3:0f:46:ae:4b:e9:4b:89:30:
f3:63:c1:57:fe:46:e9:5c:1e:cc:38:42:d5:e5:6b:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:C5:B1:0B:C1:E3:60:F3:0F:17:9E:C4:62:1A:56:84:19:2A:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac585e90-de97-3a5e-9981-425e5a740608.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.195.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:7d:cf:58:27:8a:31:22:55:92:44:6d:62:2c:ee:8f:85:96:
7b:65:a5:78:66:67:30:63:b5:06:9f:fd:95:bb:82:b3:aa:3c:
8c:a6:74:e3:0a:2e:cf:29:34:51:28:a7:c3:ee:41:65:2b:ab:
1d:87:a6:6d:a2:3f:80:c3:34:c0:94:1f:40:47:9b:74:8e:c4:
73:57:54:a4:ff:54:c4:f2:23:9d:0d:bd:39:c9:f6:3b:25:97:
b3:5d:d8:8a:44:cf:85:68:17:33:94:0b:9e:27:a0:19:fd:61:
58:bf:27:d6:35:ed:36:79:43:94:d0:5c:cd:0c:79:da:83:93:
cb:6f:18:be:0a:59:c3:3f:e1:07:af:99:6b:d6:9f:0c:4d:b3:
41:a6:2d:83:76:0e:ad:37:42:21:6c:24:9c:cf:61:9c:ec:18:
a1:af:95:a7:a5:ad:e2:7e:a9:0a:f5:b3:e4:65:f5:fd:15:60:
c3:2c:19:be:ac:bc:d1:66:55:38:f0:57:1c:30:36:40:b7:bd:
a6:93:73:a3:60:f0:de:59:bb:9a:15:c5:97:1f:2f:10:28:e5:
66:bd:57:d0:68:0c:98:7c:bf:91:db:58:25:cb:0f:94:28:ca:
59:ab:8a:06:9b:e3:47:98:85:49:b2:4e:46:38:11:40:b3:dc:
93:7b:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:50 2025 by rpki-client