Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dbe33d1f-0e85-33ab-aac5-b650dc18308f.roa
File: dbe33d1f-0e85-33ab-aac5-b650dc18308f.roa (raw, json)
Hash identifier: vZk37qcDcqRC+nrvATvRpcml5tbfrMdMyretPqyf2CU=
Subject key identifier: 2E:43:73:8C:D1:14:C9:66:98:C8:6D:92:A5:F8:63:0F:DC:A7:DD:41
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FFD3B37986D0C15AC9CF5060
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dbe33d1f-0e85-33ab-aac5-b650dc18308f.roa
Signing time: Tue 25 Feb 2025 11:24:34 +0000
ROA not before: Tue 25 Feb 2025 11:24:34 +0000
ROA not after: Mon 26 May 2025 10:24:34 +0000
asID: 30036
IP address blocks: 192.119.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:d3:b3:79:86:d0:c1:5a:c9:cf:50:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 25 11:24:34 2025 GMT
Not After : May 26 10:24:34 2025 GMT
Subject: CN=911f3add-4f76-449c-9f77-d13feae84801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:43:61:fc:34:3c:d1:6f:73:aa:3e:d9:35:
aa:b8:22:91:0e:b2:4d:30:01:6c:2d:95:fb:9d:b9:
69:40:c1:b2:ac:a1:bc:0f:6d:53:a8:72:d0:e3:3b:
69:27:fd:0e:6c:6a:4f:50:ff:54:8a:84:26:71:d8:
f5:25:76:6c:64:3a:ae:ab:17:91:43:52:60:7c:20:
dc:89:48:27:c4:46:d7:ac:cf:b7:a3:a4:ae:de:33:
39:32:35:3d:62:43:88:a3:41:66:6e:67:56:ad:2c:
aa:23:ad:78:b0:64:42:15:a4:b0:b6:03:ee:38:14:
43:ad:02:6e:cd:6e:3f:de:5d:78:91:2a:e6:30:c7:
d2:1f:22:8a:7e:17:4d:99:07:85:dd:e7:64:77:fe:
68:fc:53:f5:e9:77:ef:1d:67:f7:db:92:2b:f9:8a:
0b:8d:09:69:e5:30:1f:ef:5d:a1:30:39:47:1f:7e:
77:ff:1b:ce:71:b5:ce:8a:3e:23:9c:b2:e6:e5:11:
23:61:c4:c2:34:65:7f:d9:15:3a:72:76:dc:5b:a7:
56:34:93:ee:32:a9:d0:5a:a0:1a:e9:9f:14:a6:1b:
da:7f:0a:36:05:8e:14:27:f4:4b:15:9e:f2:f2:1d:
c4:70:ed:c3:b0:4d:41:56:1f:7b:89:60:06:3a:7c:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:43:73:8C:D1:14:C9:66:98:C8:6D:92:A5:F8:63:0F:DC:A7:DD:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dbe33d1f-0e85-33ab-aac5-b650dc18308f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:7a:2d:32:91:7c:ec:c5:1e:d1:3a:98:4d:63:b8:7b:2f:1e:
c9:2f:7a:f4:90:19:b6:1a:a7:d5:88:11:38:37:20:71:2a:f4:
49:8f:3c:ba:51:88:04:ca:b4:93:75:00:1b:f7:99:3a:ae:82:
56:2a:bf:a0:90:8a:8d:93:7a:de:90:a9:8a:c0:ef:dd:d5:e6:
ed:16:ec:27:07:44:42:76:c3:c2:b7:c6:1a:7f:f3:94:25:2e:
63:78:dc:87:34:d1:db:7e:53:c0:3a:44:72:f2:d3:cf:54:ad:
3d:52:32:de:0e:98:27:26:24:00:68:97:c4:11:c2:11:0a:cf:
fc:7c:e4:97:f9:19:1c:a5:72:89:9a:fd:27:03:7e:8b:6f:10:
34:54:99:26:6b:0b:92:9f:a9:22:22:53:88:8e:59:9d:2f:37:
59:69:24:a7:4c:ca:92:8c:0b:e6:59:42:89:65:1f:31:fb:bf:
48:c2:3d:0d:94:17:c0:29:7c:f6:85:cf:44:5a:4c:20:33:38:
02:74:38:c7:1b:36:49:f9:c8:ef:47:6c:30:de:41:10:82:71:
8b:2b:67:db:5d:16:89:93:05:0b:22:97:f6:8e:cd:e9:64:84:
ca:50:c6:9b:5a:39:e6:f4:16:14:61:6f:29:50:ef:d0:2f:c2:
ab:81:cd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:48 2025 by rpki-client