Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1aa972f3-aa07-3939-b538-d992fbf89f5e.roa
File: 1aa972f3-aa07-3939-b538-d992fbf89f5e.roa (raw, json)
Hash identifier: qsyO5H1KCqLgNrMq9UdlsDWsNb9quqWmfalh4+HYggA=
Subject key identifier: 48:4D:A6:06:63:E3:0F:9A:F9:15:21:64:7A:EB:AD:D5:6E:4A:46:46
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584917DC3719E06E6F4514BE2080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1aa972f3-aa07-3939-b538-d992fbf89f5e.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 1225
IP address blocks: 192.102.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:37:19:e0:6e:6f:45:14:be:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=6279d20a-0e79-4dc3-91d4-41197b2fae0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:a5:aa:a0:a0:ab:86:f1:bc:b2:4f:f8:47:
88:33:a6:ff:a0:d0:6e:b3:e9:52:21:3a:26:a5:d7:
1b:a4:b8:11:12:1f:8b:93:37:b6:b8:04:81:30:61:
bd:5b:0c:a4:c9:91:d6:5c:f8:d9:cd:34:06:4b:86:
b8:da:11:33:bb:be:46:57:4a:1d:f6:ce:02:04:51:
9a:e5:3f:58:92:64:c8:08:64:be:39:8d:4f:81:e7:
d3:a9:64:bb:0f:fb:43:1a:a8:8e:cc:35:13:ba:ef:
01:73:3e:13:5e:08:06:11:dc:7a:0a:42:47:ed:69:
44:d9:79:0c:24:99:bd:3d:79:5c:fd:7c:88:cf:f8:
63:b6:4f:87:29:c9:2d:ee:20:26:76:b5:dd:04:1e:
28:cd:3f:14:af:e7:19:ca:49:d4:21:d5:e7:02:94:
35:3b:48:ef:12:1d:90:22:85:d8:26:a7:b0:cc:0a:
b3:22:cf:e8:6c:65:cf:92:65:75:1c:26:66:96:ab:
28:33:37:72:7e:9f:0a:0d:b6:5a:76:a1:d0:fa:df:
26:7c:6d:6a:5a:e0:50:14:07:e3:9d:4c:56:14:1f:
ac:95:95:07:18:a1:03:9b:58:ff:31:3f:31:64:08:
9f:b7:18:a1:18:3f:c1:fb:b8:bb:48:72:cb:d4:ce:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4D:A6:06:63:E3:0F:9A:F9:15:21:64:7A:EB:AD:D5:6E:4A:46:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1aa972f3-aa07-3939-b538-d992fbf89f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.102.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:7f:74:63:f4:7b:ef:85:e7:96:f0:88:b5:41:8a:c3:60:37:
32:d3:30:27:26:5c:bb:b3:a6:3b:c1:a5:26:d4:03:5c:c4:3d:
ae:c5:b5:94:ca:d4:76:83:e0:4b:99:a1:09:60:9f:10:11:bc:
6b:39:41:48:30:69:8f:0e:43:40:4b:e3:ea:ea:da:12:3a:b0:
f4:12:d8:f7:36:7e:74:7a:70:ea:40:a2:7c:0a:c2:5a:2f:0f:
27:b5:b7:63:2c:bb:c2:79:3e:d1:c0:9a:67:3c:dd:91:9a:cc:
82:46:fa:88:8c:85:9a:0c:3c:57:75:7e:37:4f:e1:2a:b1:3c:
ed:fc:5a:a6:c4:40:90:85:59:e7:1b:b5:39:c3:a2:88:76:50:
df:1a:2e:0c:4b:a2:a6:6b:be:04:de:bc:22:ea:3c:4f:5b:45:
6f:06:f5:d3:c0:9f:89:70:4d:55:77:2d:79:b5:37:91:ad:39:
5b:df:77:bf:2e:46:5d:c9:42:8c:1a:5a:bd:b7:11:0c:36:a7:
13:ef:5b:5b:dc:f7:10:ce:df:27:09:ad:70:42:c6:e4:ec:8d:
08:9e:0f:bb:be:82:c7:56:49:54:bc:13:b6:94:7f:c9:04:1a:
d3:e9:21:ca:ee:e1:97:b3:87:90:2a:17:a9:4a:aa:2b:76:bc:
06:3d:dd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:18:24 2025 by rpki-client