Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa
File: e23c22d9-927c-3a62-b4be-b1550143609d.roa (raw, json)
Hash identifier: mclY+3A3DeQj0cGj4mxQO2C407rRa74oIQ/fxbsJfE4=
Subject key identifier: 3F:54:04:79:BB:98:E3:B9:CA:41:48:7E:3D:74:0F:9B:31:EE:DC:AC
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F4328584953C41AAF73B79B5508EC15C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 0
IP address blocks: 192.42.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:1a:af:73:b7:9b:55:08:ec:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=93b94d65-49f5-494e-85dd-20d4fce788af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:3e:53:a7:cb:0e:59:17:17:50:5c:f3:d8:
5b:69:10:79:2e:3e:40:80:b9:18:50:1e:05:10:04:
10:4a:25:dd:36:f8:6a:02:36:7c:26:ef:7f:c3:6a:
af:55:34:ac:83:43:85:6c:29:5a:8e:7e:5e:7e:69:
05:53:21:41:a2:be:f7:98:7b:cb:af:fd:9a:d0:cc:
0b:78:9b:24:f9:cf:c9:a9:6d:aa:7c:0a:18:5e:c1:
a0:79:ac:e7:05:7c:8d:e8:b7:4e:71:7e:fb:92:8e:
54:8d:e8:a2:68:35:56:69:0b:bc:bd:31:5a:02:81:
0b:55:82:6a:df:30:cd:73:9a:f9:47:4f:bb:95:7c:
36:e0:43:35:1f:26:b2:c0:a5:e6:38:83:2d:7b:21:
4a:18:68:fc:15:d9:aa:31:44:ad:16:1c:b8:4c:3c:
b3:e9:b1:e6:c8:4c:30:29:67:9e:ba:30:4d:09:9b:
7c:b1:43:ce:2f:36:a5:1c:bc:94:d1:4f:44:e8:19:
cd:a7:ad:04:4b:a9:38:18:06:cd:e4:36:2e:ff:6f:
9a:bf:60:9f:f6:ad:e7:f2:a2:d5:b4:5c:07:22:29:
5c:ad:ce:be:f9:46:dc:f3:27:e4:48:b2:be:54:b2:
d2:b7:5d:9c:f3:62:09:32:2b:5e:f3:26:a8:31:21:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:04:79:BB:98:E3:B9:CA:41:48:7E:3D:74:0F:9B:31:EE:DC:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:74:57:6d:f4:62:6b:a3:36:ae:94:c3:31:8a:79:10:4d:14:
5f:74:d0:7e:c2:a4:ae:1f:6c:1f:59:dc:83:45:97:76:1a:1d:
5f:45:ee:6c:83:87:4d:2e:d5:99:74:7d:1f:e3:33:23:46:7f:
b6:07:fe:ce:fc:0b:72:2a:39:e3:fa:21:30:22:d6:0e:75:56:
99:fa:c0:a2:8b:5d:7b:3a:bf:3f:d1:13:86:a5:2f:c0:fe:52:
48:03:bd:a5:74:23:31:2b:a4:38:11:52:55:6f:ec:b5:53:c1:
45:c7:4f:0e:50:2c:11:06:fb:4f:c6:49:1b:ff:55:1a:0b:dc:
43:89:6c:8d:08:cc:13:6f:15:a1:d4:88:55:63:9f:77:66:ab:
2b:5a:81:6d:cd:99:a3:8f:12:b9:d8:fa:45:ec:2b:31:ef:5a:
39:cb:64:19:03:d5:a2:7c:02:28:60:91:94:89:49:ce:81:95:
89:6f:74:49:90:ee:0b:42:2a:b8:9c:96:62:09:56:a8:34:3b:
26:fa:75:ba:37:61:52:18:98:78:d2:88:ff:40:ef:c1:41:b5:
ed:e2:9f:e0:38:5a:4b:3d:ad:de:8f:fb:e0:09:7d:e3:3c:c5:
15:79:b1:97:da:16:f7:3f:54:9a:50:5e:cd:6b:ec:8e:1e:92:
1b:d2:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:31 2025 by rpki-client