Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b4cfb36f-e372-3e5f-8729-170784a6a7bd.roa
File: b4cfb36f-e372-3e5f-8729-170784a6a7bd.roa (raw, json)
Hash identifier: bLF5HL6mILGk+P6wpIzv0TdNCsV4G7jozS1Jcd1npEo=
Subject key identifier: 6A:04:A5:AA:2F:B1:32:F0:3A:0C:D7:94:C2:36:73:5E:0C:75:5F:C6
Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial: 010D0C9F4328584913C1AF2FB798056F67875800
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b4cfb36f-e372-3e5f-8729-170784a6a7bd.roa
Signing time: Tue 04 Mar 2025 14:44:26 +0000
ROA not before: Tue 04 Mar 2025 14:44:26 +0000
ROA not after: Mon 02 Jun 2025 13:44:26 +0000
asID: 3842
IP address blocks: 192.184.88.0/21 maxlen: 21
192.249.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:c1:af:2f:b7:98:05:6f:67:87:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Validity
Not Before: Mar 4 14:44:26 2025 GMT
Not After : Jun 2 13:44:26 2025 GMT
Subject: CN=75df08a8-8b77-4a41-8ccb-5d8fb0e1f14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:fd:1c:14:43:e9:58:82:09:c4:9e:05:c8:
fb:64:b0:e2:21:6c:c0:a4:70:35:d8:11:92:3c:1e:
16:81:b1:36:a3:07:d2:9e:f7:03:6a:bf:6e:ed:ab:
d5:7c:77:02:83:bc:e4:a9:be:82:14:6d:99:92:2a:
ba:c4:0f:86:be:b2:85:ba:fa:09:6b:05:43:fd:cd:
23:f3:2e:e0:7c:4f:cd:63:f2:87:cf:45:0a:7f:6b:
7f:f8:e9:27:e4:0d:73:d7:c3:c5:d1:85:04:dc:3a:
e9:a2:50:06:e8:05:a8:9f:82:94:8f:f1:4c:69:2a:
5f:40:74:28:49:59:fd:30:0d:57:36:f3:49:48:ef:
10:97:c3:39:42:cc:03:89:48:02:11:ad:55:d6:d8:
a9:f1:3b:0d:32:ba:9f:50:f2:82:d9:8e:91:12:f9:
53:72:81:68:d2:5a:59:30:02:27:ec:ac:66:28:9e:
52:db:47:bf:4f:18:eb:30:3d:21:96:27:1b:ef:6c:
7f:e1:23:f2:91:42:32:0a:30:c4:02:47:cf:93:3e:
6a:c3:79:6c:79:2b:9c:82:ec:48:07:d2:7e:62:4f:
ed:73:80:b6:ac:49:f0:68:69:12:60:e7:52:1c:04:
32:93:df:3c:5f:43:56:07:3f:fc:08:9e:88:90:2c:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:A5:AA:2F:B1:32:F0:3A:0C:D7:94:C2:36:73:5E:0C:75:5F:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b4cfb36f-e372-3e5f-8729-170784a6a7bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
X509v3 Authority Key Identifier:
keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
sbgp-ipAddrBlock: critical
IPv4:
192.184.88.0/21
192.249.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:ad:41:20:08:3b:3e:e6:ef:12:49:53:45:25:c2:c9:7d:05:
24:26:df:05:df:98:99:01:de:1e:06:7c:02:14:32:22:34:76:
81:73:89:dd:02:72:f9:55:d9:79:15:d7:b4:c2:76:61:6e:80:
c4:31:c0:5d:f5:67:3d:d6:16:2b:b7:9c:9b:64:dc:fc:1c:d7:
ce:b9:61:8e:4a:7a:55:4e:36:73:20:20:20:e1:59:ba:21:7c:
70:61:22:21:fc:09:7b:c8:ef:06:73:41:e2:a1:d8:52:9f:a2:
5a:06:d4:30:5e:e9:8c:3d:4f:12:2d:af:23:05:e1:da:30:e8:
51:f1:69:2a:63:de:2a:f7:34:b2:e6:ad:11:75:b2:0e:86:cb:
db:02:92:d9:30:c9:da:1b:f7:04:2c:e6:ed:52:40:93:ed:db:
23:6e:ae:09:b7:34:24:f3:a7:08:3b:87:63:ad:e3:04:eb:a0:
71:8e:c8:06:f2:9f:d3:25:a4:da:e1:03:97:d8:9b:b6:90:34:
2c:ee:6e:d7:85:19:15:7b:9c:d8:10:4a:1d:a8:2c:07:db:c6:
fa:48:fe:f5:14:4d:ed:de:50:a8:ce:75:e2:cc:ee:d5:35:27:
98:1d:a8:3b:c0:56:8c:ff:17:71:f3:2d:42:b5:a4:f5:a2:d9:
d0:3d:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:51 2025 by rpki-client