Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
File: 1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa (raw, json)
Hash identifier: 8LPI6f5CtU6/luzM4RGybaTWpBdZobpZasWx+jv5YhU=
Subject key identifier: 0C:B6:A4:56:D1:6C:7E:21:70:26:FA:B3:CE:C9:AF:1E:C6:51:CB:28
Certificate issuer: /CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Certificate serial: 010D0C9F4328584940394CC8CC603AC568E2F400
Authority key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 61317
IP address blocks: 192.48.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4c:c8:cc:60:3a:c5:68:e2:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=3dc93468-5843-496e-8b77-3e245d14308b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:e3:e0:06:90:1f:db:57:3a:df:5e:4f:17:
21:a9:e5:b2:71:a3:11:c8:8b:55:c9:37:e2:a5:5e:
b9:1c:9b:9b:08:a0:a8:21:44:7f:6e:d2:5b:dd:d2:
38:fd:99:43:df:31:9c:d1:18:da:51:a9:de:3f:b2:
ba:41:0b:28:34:b6:5d:7a:b7:1d:8d:c0:62:19:1f:
cf:c2:d8:bf:10:33:d7:61:d1:d2:3f:95:9a:3b:34:
b5:70:1f:7d:ac:18:df:6a:6a:13:63:f4:5d:d0:6c:
d3:9a:9d:63:89:2c:7c:ca:5f:4b:40:35:40:7e:76:
a7:6e:f3:2f:52:42:10:ce:31:9b:6c:1d:62:15:7f:
30:b8:ad:df:18:49:87:a6:05:28:68:d0:61:35:66:
cb:38:f6:1b:f9:cd:da:0a:c8:3f:25:f5:99:a7:46:
36:e9:27:0b:7a:b4:20:7c:eb:fa:58:17:be:14:5f:
22:ae:30:8e:ad:06:c2:dc:fb:b0:5e:d7:33:d8:6f:
51:03:21:f3:29:b6:92:dc:47:1e:ee:1f:b7:be:99:
19:d8:b6:d6:79:41:89:d1:25:fd:59:5b:26:c1:75:
93:9c:c1:47:fa:09:e2:b5:16:62:77:d3:e3:52:5b:
36:34:81:93:07:2c:d5:66:8e:aa:87:38:85:9f:8a:
84:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B6:A4:56:D1:6C:7E:21:70:26:FA:B3:CE:C9:AF:1E:C6:51:CB:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl
X509v3 Authority Key Identifier:
keyid:17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.48.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:7f:20:d1:31:1e:b4:ee:3b:b8:ad:be:73:f8:49:45:75:28:
d7:40:28:60:9f:2e:17:25:34:f4:48:c4:3c:10:e7:ed:99:5d:
de:af:7c:03:56:94:06:70:37:dc:13:bf:41:bd:81:7b:1e:55:
21:eb:04:9e:ed:07:ad:e2:2c:65:90:0c:23:91:58:e2:dd:6e:
b4:98:56:51:a2:5f:b9:b3:e4:df:e4:de:7f:8b:00:8a:6f:e1:
88:ea:a0:0c:49:dd:d5:59:4d:7f:aa:bd:aa:cc:c6:3e:28:48:
6b:6d:69:46:c0:e3:d6:14:1e:c5:d2:b9:e8:1c:1a:39:72:3a:
2c:63:4a:12:68:32:84:f3:43:80:c9:15:6e:15:f6:2a:bb:f6:
56:69:ad:e5:60:cb:b8:29:88:3b:6e:69:6f:31:4b:51:dc:a4:
4f:9e:22:92:dd:48:ae:a2:3f:9c:b9:29:83:af:71:c4:a9:ea:
ed:ad:1d:bc:18:3f:0d:f9:b5:c6:b6:af:37:93:de:46:e4:ec:
b3:96:27:14:76:03:03:c9:da:1c:37:99:18:d7:c3:d6:c5:c1:
ba:28:79:d7:16:e5:5b:ba:79:30:ca:0b:8f:45:94:c6:ed:bf:
8a:8b:1b:e8:27:dd:c2:4a:23:48:50:3c:d7:c4:32:3e:9b:35:
c5:4b:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:18:40 2025 by rpki-client