Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f06213c6-cd65-33a2-b373-14af6a7ead3e.roa
File: f06213c6-cd65-33a2-b373-14af6a7ead3e.roa (raw, json)
Hash identifier: NRyiZ4OGtgAK+K6khDO0FiGzRXZPzxBuadsKdqGppzE=
Subject key identifier: 01:72:E6:2B:BB:51:9E:72:F5:2D:97:19:2E:01:11:28:DD:A2:FF:49
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E5066EA62B8537D35937440
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f06213c6-cd65-33a2-b373-14af6a7ead3e.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.67.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:66:ea:62:b8:53:7d:35:93:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=7f2048c8-d584-458a-9622-f15780979fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:a3:4d:c6:b3:e0:ac:b3:2e:ef:e1:e8:4a:
76:8c:1d:7e:4b:f2:57:ef:d1:71:73:7a:43:5c:6e:
ea:37:25:40:26:d6:c3:6c:cf:90:76:ae:9e:6f:0f:
69:42:e1:34:b2:0a:df:1c:89:b0:3d:6e:bc:98:bc:
b5:27:ae:b1:03:68:2f:05:f4:84:8a:6c:51:e4:dc:
bb:c1:2e:28:f5:f8:f9:82:4b:04:1b:8f:a0:a5:ce:
af:b7:6d:c0:0a:f6:eb:83:81:19:e2:3b:45:f8:76:
b0:d4:ed:09:8b:a1:0a:f9:17:af:ff:5f:58:5f:6a:
97:5a:fb:73:7f:08:e3:87:37:30:d9:61:de:e2:29:
26:2b:85:f5:0d:ef:a9:c2:45:48:f7:a9:20:ac:be:
f0:8a:d9:92:2c:bf:ba:46:2f:f3:2d:4a:10:31:11:
36:47:49:cd:b8:72:9c:97:4c:58:00:a4:f5:aa:1c:
e2:2b:9d:a8:7e:31:a9:9b:b6:e5:30:4c:15:ab:a0:
18:93:d3:33:ab:32:6b:60:0e:d7:cf:57:81:7f:a0:
e8:7c:04:3e:49:48:5b:a0:04:e8:ca:f2:71:ab:f3:
3a:31:88:5b:71:5b:63:c5:76:a6:aa:89:ad:83:cf:
03:2f:cd:4e:bc:0e:26:22:3e:37:61:5b:3e:88:43:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:E6:2B:BB:51:9E:72:F5:2D:97:19:2E:01:11:28:DD:A2:FF:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f06213c6-cd65-33a2-b373-14af6a7ead3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:ea:48:35:32:7c:fb:5a:62:ac:78:58:d9:ae:b4:b8:7b:49:
7d:51:92:5d:c3:3f:e1:a9:a9:96:08:b6:f1:a8:3d:ba:fa:23:
bd:4a:8b:1d:07:01:7d:b3:f3:9c:10:c6:d7:ce:d2:be:7e:2b:
69:16:5b:7f:05:f0:1d:d7:9d:35:c8:69:63:d7:83:4f:f1:9b:
9a:3a:aa:1c:b7:ca:32:02:ef:92:11:cf:5b:96:e5:b6:c4:54:
ec:94:79:b2:2b:0d:b3:d7:d4:c2:2d:4d:b2:11:0e:76:97:a5:
bc:00:82:c9:81:e6:16:c9:d6:5b:f5:65:f2:27:02:5a:cf:94:
ec:ea:e2:d8:0c:62:23:37:14:f4:cf:d5:a2:cb:f6:a8:93:3f:
8a:c7:f4:0e:11:d6:46:e5:a6:92:ed:a9:3f:7c:0a:c6:8f:34:
be:68:f8:f6:d4:2d:aa:18:d5:99:e4:37:d0:fc:5a:71:c5:62:
c0:9f:18:28:3f:95:51:b0:5b:32:5a:5e:ab:4b:44:af:9a:a8:
ea:7c:fe:ee:75:64:b9:0e:d6:c9:a2:cf:62:08:a3:bf:7e:e2:
4a:6a:b4:5b:1f:38:f2:40:fe:75:77:d6:b5:77:39:6c:dd:81:
d4:c7:2d:31:72:e9:1a:b1:ad:2f:b2:36:33:a4:13:9a:6f:9e:
2c:7c:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:03:15 2025 by rpki-client