Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa
File: fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa (raw, json)
Hash identifier: h8xF1Z+ltA6ZwAEqzNEJUNCQf4vphAxT8PThCB+r7N4=
Subject key identifier: DB:12:07:06:EC:D3:D3:20:65:33:C7:91:1E:72:E9:C5:6F:1C:64:E6
Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial: 010D0C9F432858493C0927F72C19DAED2A9D1C80
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 10745
IP address blocks: 192.136.136.0/24 maxlen: 24
199.43.0.0/24 maxlen: 24
2001:500:4::/48 maxlen: 48
2001:500:110::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:27:f7:2c:19:da:ed:2a:9d:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=18983cbc-274a-485e-967d-f88aa56e590c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:85:6a:ac:59:5b:83:fa:e7:7d:06:6d:5f:
c1:1d:69:ec:b6:95:36:20:d7:ee:98:f3:e3:bf:bb:
78:53:3f:cd:21:4b:a7:f5:e1:6a:71:2e:1b:ef:bf:
24:2b:61:45:83:ba:4f:fb:a7:42:23:42:c6:15:55:
78:da:d1:9a:10:68:9c:56:de:ec:ab:9d:b7:0c:d5:
77:49:8d:2b:8d:4f:d7:c2:bc:49:81:6d:e4:db:da:
ee:d1:29:96:e2:17:13:12:b6:62:52:10:46:1f:f9:
60:88:56:bd:10:04:d1:78:52:0b:77:dc:c8:ba:f4:
0b:09:a4:9a:26:7a:89:58:5e:42:07:9a:a2:58:2b:
21:19:3d:d2:84:6b:29:bc:42:9f:ac:34:a2:1b:ff:
ff:74:f4:80:7e:70:8f:ff:a3:58:6b:2b:45:02:ef:
92:69:57:b6:64:28:df:b6:ec:59:64:a1:89:16:d6:
c1:5b:ca:16:f0:9f:59:57:fc:f8:dc:0d:19:38:86:
36:68:c8:87:28:28:76:85:a2:14:94:0c:08:37:3e:
86:dd:7a:0d:9a:69:d5:ad:e4:73:09:ae:22:b3:43:
c5:72:08:78:8b:46:62:e9:7e:f1:6b:75:19:15:7e:
06:30:ac:20:c1:9c:f4:d9:73:8f:c3:ee:d1:e8:b5:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:12:07:06:EC:D3:D3:20:65:33:C7:91:1E:72:E9:C5:6F:1C:64:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
X509v3 Authority Key Identifier:
keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.136.136.0/24
199.43.0.0/24
IPv6:
2001:500:4::/48
2001:500:110::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:51:45:49:89:cc:50:9a:7d:4e:79:6d:be:dd:56:7f:a7:ae:
5a:eb:70:93:f4:95:34:5e:de:cf:dd:1b:5a:44:b5:4c:94:a3:
86:34:f6:9d:cf:d8:a4:33:1c:5f:e4:86:6c:8b:ac:3c:dc:d9:
ad:57:14:d0:64:45:6c:9f:a4:c4:76:ca:57:0d:70:54:66:e4:
79:93:7c:f2:fc:4d:23:e4:40:7b:4a:76:2b:e6:d9:6a:bd:80:
23:17:ec:ae:b8:07:ac:eb:14:77:a9:02:8b:dd:9f:5a:45:ee:
dd:84:e8:b3:5f:1e:8a:a9:de:06:d7:c9:3f:17:4b:65:a6:bf:
d6:6e:e0:9c:20:b2:9d:40:a0:d6:7d:d2:1d:93:65:cf:41:95:
d9:74:a9:13:fe:cd:41:12:80:21:27:76:40:83:e2:c6:65:ec:
01:bb:18:b3:7c:66:e9:36:5e:06:73:78:30:af:03:07:1d:c8:
dc:26:94:47:f1:18:6f:31:0e:32:91:31:c9:e1:e0:a5:09:dd:
0e:e0:cd:56:69:e0:09:d6:12:24:74:00:94:1e:2c:1e:ee:98:
5e:38:3f:95:cc:77:b4:f8:de:73:d6:d9:1a:dd:76:14:b3:8d:
3a:32:c1:33:57:5f:00:7d:34:83:b8:19:a6:af:93:05:ec:cf:
81:5a:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:34 2025 by rpki-client