Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f5d81b4-6393-3f46-863d-83776f0c2793.roa
File: 8f5d81b4-6393-3f46-863d-83776f0c2793.roa (raw, json)
Hash identifier: hHTejxUgkCp3SGea1ZI7Jp5fnrqkPre8TIewsDlIhLo=
Subject key identifier: D5:74:92:95:A4:72:3D:F4:DD:49:59:01:38:7B:24:A6:76:53:BC:68
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FFCC30E2C3DDE435FFE1F500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f5d81b4-6393-3f46-863d-83776f0c2793.roa
Signing time: Tue 25 Feb 2025 11:09:26 +0000
ROA not before: Tue 25 Feb 2025 11:09:26 +0000
ROA not after: Mon 26 May 2025 10:09:26 +0000
asID: 30036
IP address blocks: 192.119.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:cc:30:e2:c3:dd:e4:35:ff:e1:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 25 11:09:26 2025 GMT
Not After : May 26 10:09:26 2025 GMT
Subject: CN=ade0be16-183a-43f8-8c40-8ded742ed8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d4:e0:e4:80:a9:fd:6d:77:2b:bf:19:b7:cc:
f4:db:5b:59:11:95:03:1d:6c:08:55:fc:67:f3:12:
6a:7d:76:a1:1c:3d:fe:f1:a8:0c:e8:99:4f:4b:e5:
0a:43:f4:cc:01:b0:a4:44:ff:d8:59:47:c5:66:a7:
c2:12:75:78:ad:e8:6d:08:22:cd:e2:1e:fa:ff:39:
b0:fb:d8:0f:91:ac:50:0a:c2:8e:eb:ac:39:56:36:
10:f5:a1:80:ff:02:9c:c4:6b:fa:70:ae:b7:99:95:
6b:bc:d3:d1:72:f3:c1:4f:13:71:24:28:6e:c5:87:
3d:41:44:09:d1:1a:a1:05:fc:c5:b4:fe:81:7a:7a:
ad:83:11:86:3c:ef:85:5f:2a:e5:f6:11:e9:b0:ba:
6e:d9:2b:4e:2a:30:74:08:e9:26:4e:f7:86:27:a3:
23:b1:d5:5b:ef:c1:ae:3f:de:bc:60:a8:ad:2d:bb:
cd:21:dd:e7:34:0c:cb:d1:c4:f6:29:df:24:5f:8f:
4c:a7:32:c5:ee:be:89:bf:fc:dc:70:c7:b9:3e:b8:
68:c8:27:df:12:ec:93:e9:d9:ed:52:79:15:c9:ee:
d7:b6:4b:e4:f7:41:fe:db:23:a0:ea:38:c9:0e:f2:
27:c1:ff:21:a5:5c:f1:ff:3d:df:6e:15:c0:03:cf:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:74:92:95:A4:72:3D:F4:DD:49:59:01:38:7B:24:A6:76:53:BC:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f5d81b4-6393-3f46-863d-83776f0c2793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:d7:90:72:af:b0:9d:b9:dd:41:af:5f:a0:e5:ab:7f:15:70:
ab:54:72:1e:ab:77:78:7b:a5:86:b6:62:91:94:39:29:e5:df:
22:8c:76:e0:4b:bf:73:81:70:b4:f4:a6:86:ed:b4:fe:78:af:
d3:6b:1f:99:3f:b0:26:3b:00:62:55:03:04:2c:77:f6:ce:8f:
0b:b7:dd:8e:b5:9c:72:74:4e:03:89:9b:b0:a3:b2:06:26:e7:
2e:f2:70:25:c8:11:34:69:fc:71:1d:87:f9:f2:91:82:3d:65:
59:a4:9b:fc:d5:72:ac:07:9b:ab:2d:44:8d:1d:8a:e9:5a:8f:
b6:4c:d7:e2:4d:58:3e:cf:c9:0f:df:b6:b4:f1:42:c0:8e:d1:
55:93:6a:03:28:9e:73:61:88:ac:07:e8:5c:30:8f:ec:92:e4:
ba:dd:e1:1e:a6:07:72:8e:05:2d:b2:a1:c6:03:51:94:4d:3f:
d2:1c:00:cf:76:fa:aa:8c:d0:7f:b2:e0:81:93:f0:b6:20:f3:
1f:4e:40:8d:e1:04:2d:9d:d7:80:d7:c7:18:bc:af:de:26:04:
42:b7:1d:35:dc:a4:cf:9a:5c:75:dd:54:ca:8c:13:f8:0e:08:
5c:06:3f:ea:48:3e:22:27:ff:ab:04:0c:73:4a:14:08:43:ac:
be:74:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:55:58 2025 by rpki-client