Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/f7adfd6d-7fa8-3198-9dbd-519db4b3bd7a.roa
File: f7adfd6d-7fa8-3198-9dbd-519db4b3bd7a.roa (raw, json)
Hash identifier: F2TEn2WzkhCoE4tUeQYHGCWXzqKQXy5tY3Snaa0nT2w=
Subject key identifier: FD:B4:F6:D3:25:F4:01:5E:70:5B:9B:51:5C:41:A1:2E:A7:BB:CD:5C
Certificate issuer: /CN=0265af60-e6e1-4613-b159-33bc6053852a
Certificate serial: 010D0C9F432858492CAE7B8A1AB7F4A98FFD79E0
Authority key identifier: CE:AD:10:F9:CE:E6:DA:D9:9D:6D:E1:C2:10:84:42:6D:85:F2:15:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/f7adfd6d-7fa8-3198-9dbd-519db4b3bd7a.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 394256
IP address blocks: 192.30.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:7b:8a:1a:b7:f4:a9:8f:fd:79:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0265af60-e6e1-4613-b159-33bc6053852a
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=732f5ba3-c5ae-45b2-97fe-0dbee372b1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:85:aa:3b:6b:7b:e9:2b:49:6a:21:6e:fb:0a:
e0:8f:f7:f5:28:31:6d:53:82:0b:75:f1:06:f5:8a:
b8:8b:f0:ac:5f:c9:e0:fe:0b:8b:6f:e9:6e:27:b4:
ae:1f:6a:c5:5b:e7:33:28:70:f5:30:18:1c:fb:c9:
6a:c5:45:f2:31:4b:6b:2d:b8:5e:23:8e:c9:ba:7e:
e8:0d:03:0a:fe:ef:f7:73:4f:1a:fb:42:eb:9e:0c:
65:57:1c:b4:a6:d0:c5:53:61:66:21:a4:10:6d:aa:
4a:fa:bb:f9:88:0c:68:97:65:d4:a8:f8:6b:19:03:
3b:19:b7:7f:52:8b:34:a5:33:bd:b4:0e:26:fc:cd:
0e:e2:20:c6:79:e6:8c:1f:c4:50:b9:69:2a:78:77:
ad:23:66:29:b2:dc:95:ee:da:38:9b:93:90:eb:f8:
dc:3f:55:4f:aa:12:4a:30:a4:fd:02:fd:21:25:64:
b0:09:09:a9:89:40:f9:7a:4c:a3:bf:d2:09:4c:a2:
10:5b:fa:c4:89:94:58:b2:69:10:58:10:e4:4a:86:
a9:f8:54:61:2c:36:cb:ed:82:51:c6:dc:16:76:fa:
8c:36:4a:12:9f:83:db:e3:a7:bc:f9:86:ec:65:e3:
e8:93:e9:5d:03:05:85:a3:2c:ea:c6:67:4b:ad:b3:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B4:F6:D3:25:F4:01:5E:70:5B:9B:51:5C:41:A1:2E:A7:BB:CD:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/f7adfd6d-7fa8-3198-9dbd-519db4b3bd7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.crl
X509v3 Authority Key Identifier:
keyid:CE:AD:10:F9:CE:E6:DA:D9:9D:6D:E1:C2:10:84:42:6D:85:F2:15:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:5a:c0:d7:c2:b6:e8:47:cf:55:78:37:26:a0:d9:b8:26:1f:
87:5c:b4:48:0b:c7:dc:f8:5c:a2:ef:26:2c:b2:a8:94:8e:f6:
e2:b8:d5:a8:2d:d4:ce:68:19:4e:72:cb:1d:e0:2f:4c:e6:4a:
e8:94:e9:ff:a6:4f:21:e0:d1:59:b1:1b:af:09:2b:4c:13:62:
f1:79:34:08:7f:c8:66:c6:0e:6e:92:51:ee:d0:d0:15:c4:24:
e7:bf:68:3b:6d:a9:ae:17:94:cb:f7:c3:07:5d:ad:38:0a:0e:
83:53:aa:f4:49:c4:16:89:f1:0b:ca:fe:86:fb:14:c7:bc:9a:
13:f3:18:1e:f6:1a:4f:50:c3:f9:63:e7:45:9d:44:fa:9b:21:
1f:b7:98:d6:d8:a2:95:85:39:c7:c0:39:4a:3c:9e:ae:3d:bb:
88:df:5d:b6:3f:15:b1:0d:6d:20:af:96:e8:72:d8:19:59:05:
6b:e4:ea:66:61:91:5a:d3:08:31:53:2e:f8:e7:6e:bb:21:9c:
95:6f:32:cb:c9:51:be:01:3c:bb:3e:82:07:f1:be:04:d8:56:
d9:02:63:a2:ef:31:f7:22:d0:4f:63:33:21:85:e5:78:9f:75:
76:dd:e7:4e:bc:38:b1:7b:c5:75:e4:48:11:dd:25:ba:f8:bc:
b8:9e:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:18:09 2025 by rpki-client