Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f9776a7f-225e-3ef8-9666-75077fc17b3e.roa
File: f9776a7f-225e-3ef8-9666-75077fc17b3e.roa (raw, json)
Hash identifier: QVwBaR6uvSBshJZVzs+Lr5cE5NYkrXi71GUikI5jSDg=
Subject key identifier: 00:E6:C1:D0:5B:5D:0C:DB:76:A1:4E:1B:4E:B7:B5:16:0A:50:82:65
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F4328584953C414E9AAB198EF8FDF92C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f9776a7f-225e-3ef8-9666-75077fc17b3e.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 0
IP address blocks: 192.42.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:14:e9:aa:b1:98:ef:8f:df:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=eea886b3-551c-470e-ba6f-55fb0b112093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:0e:a5:7c:5e:c0:71:ec:34:23:b1:6f:bc:
0d:a0:6e:3b:00:34:99:b2:d1:83:2e:44:35:57:06:
81:1e:52:0e:7d:7a:e7:f7:84:52:7c:fb:65:6b:eb:
96:01:5f:e0:fc:00:cc:af:25:61:96:35:e9:60:59:
fc:ef:d8:3d:93:4b:11:36:ac:a2:32:70:9b:b9:40:
15:9c:2d:27:8b:5f:53:95:d2:33:54:8d:c8:e9:c1:
ca:dc:85:6c:f5:72:03:25:f2:a6:56:c2:17:7d:ec:
01:b2:44:e0:d1:e3:3a:35:af:5a:0f:ba:ae:ef:ea:
c2:dd:5b:8f:71:62:04:62:51:2f:6b:12:d4:cb:32:
e2:e8:53:be:42:40:fc:4b:5d:b1:ed:47:f3:ba:56:
0b:43:99:f1:f3:4c:83:10:cd:1b:dc:a6:aa:17:10:
ad:f1:a1:2c:e3:b0:b5:28:ec:c8:58:93:50:ea:bd:
6a:5c:c5:8d:fd:de:65:9e:55:8b:f5:39:f0:78:2c:
08:7a:dc:d2:7c:27:1a:0f:68:b5:e4:26:bd:ae:a5:
2b:ce:00:59:4d:2b:a6:78:f3:7c:22:49:0f:35:e3:
2d:26:4d:6f:be:31:a3:18:fa:45:dd:a6:5c:1e:29:
1e:8b:81:f2:40:ab:7a:d5:26:69:06:f9:21:2c:d6:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E6:C1:D0:5B:5D:0C:DB:76:A1:4E:1B:4E:B7:B5:16:0A:50:82:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f9776a7f-225e-3ef8-9666-75077fc17b3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:46:f6:3d:2d:bb:b3:9b:f1:24:71:d1:1f:d6:40:78:24:59:
05:26:1a:c2:17:20:e7:2c:da:f2:40:ab:c5:5d:7a:f3:69:e6:
0d:c1:47:01:99:fd:02:c5:cb:40:7f:6a:0b:61:ca:e0:24:a0:
c4:9b:96:9b:a6:9c:41:f1:a1:1f:81:db:af:55:e3:69:5a:29:
24:ac:df:41:6f:83:20:e8:fb:f0:3b:7c:8b:fb:44:14:04:b6:
f7:0c:b0:b1:cb:d0:97:59:28:b2:a0:02:49:2b:1e:6b:e6:61:
c2:cf:ed:5c:00:2e:0c:c0:ee:f7:64:87:ac:77:37:fa:6e:cd:
ac:80:6b:c8:1d:00:a0:9b:79:96:c2:fe:b7:ec:1d:91:f2:d8:
8f:dd:fb:03:5a:69:1f:b8:2d:e5:8a:15:23:04:75:5b:90:bf:
1a:d2:d2:2a:ce:12:aa:c6:b4:d7:e8:fe:d0:4c:19:d8:4d:38:
06:96:70:71:5e:f7:79:92:13:bb:f3:c1:95:da:6a:64:a1:9c:
4b:f4:1c:86:dd:5d:7b:d5:03:74:66:ba:6e:ee:9e:a3:05:aa:
ca:ba:da:fd:4a:78:f0:87:23:12:d3:1e:ee:6c:47:3e:8e:cd:
6f:44:95:5b:ac:5c:a3:b5:8d:33:c1:0b:b1:6e:ee:ba:ed:11:
46:87:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:28 2025 by rpki-client