Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/cf39e95a-434e-3a46-8421-4fa3f8805dc4.roa
File: cf39e95a-434e-3a46-8421-4fa3f8805dc4.roa (raw, json)
Hash identifier: bhx9fyDK3wE9htWIxUmR2sd2zf9Ku7kz2RWua/iQQEM=
Subject key identifier: 12:C3:94:F5:62:5B:4E:8F:E8:5F:73:A8:62:AE:8F:67:12:39:0A:21
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F43285849244E7A3D2258962DEE4DE700
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/cf39e95a-434e-3a46-8421-4fa3f8805dc4.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 36231
IP address blocks: 141.193.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7a:3d:22:58:96:2d:ee:4d:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=aba09c08-a7dd-4cb5-861d-8ae263f5a9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:78:12:ed:35:d3:0b:6b:05:0f:50:f5:f6:
be:51:ec:52:35:13:64:be:17:6e:a8:e0:31:09:69:
c5:5b:41:75:8b:be:2c:b0:30:48:69:31:30:24:ca:
2a:d8:3c:62:1c:85:b2:98:4e:44:9d:99:a1:94:ad:
7d:34:39:44:49:22:65:18:c6:9a:44:81:aa:b6:15:
d2:1b:d5:d6:8a:95:8a:a8:15:36:93:a8:6b:8a:b8:
3a:81:d5:dd:6d:0f:b7:97:11:24:c5:e2:37:ae:5f:
90:15:8f:99:f2:4b:60:80:d5:95:90:25:f5:95:1b:
55:a3:0c:22:8e:d8:51:d1:6f:a5:b7:cd:5a:d8:26:
d7:f1:ba:72:6f:7c:20:ab:53:1f:c5:86:2c:dc:a4:
0d:21:15:3b:bf:92:2e:26:d2:8d:80:0c:16:62:8c:
d5:69:6f:95:53:86:4b:ec:e3:fe:b8:4e:b9:47:ff:
b7:01:33:32:0c:a8:7d:bf:d5:dc:20:0b:8b:15:38:
69:34:2d:d7:89:26:e4:24:67:d8:da:74:c3:17:b0:
d2:4b:fc:2b:7e:b3:ee:9f:10:87:f2:75:dc:01:a2:
eb:7e:6d:3f:0c:f9:33:8e:41:5d:5e:da:bd:44:e2:
ae:be:5b:98:23:99:56:c0:f0:8b:a3:48:2a:f2:65:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:94:F5:62:5B:4E:8F:E8:5F:73:A8:62:AE:8F:67:12:39:0A:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/cf39e95a-434e-3a46-8421-4fa3f8805dc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:d7:d6:cd:0a:ce:c2:7c:b3:a8:92:e8:3f:d9:3f:e3:b2:99:
67:cc:58:98:3b:eb:0f:b4:e0:e4:0a:4d:39:a2:65:f8:6d:77:
48:63:37:1e:36:c2:e5:af:83:01:c3:aa:e4:cc:08:60:c5:08:
ff:04:67:95:e6:05:31:f0:b8:7e:54:dd:40:22:99:45:8c:a7:
83:1c:4f:94:5d:7e:0a:61:f1:21:72:5a:32:de:fc:f9:1a:3b:
fa:80:6d:8e:d7:e5:d7:24:04:81:f9:8f:54:e3:dc:da:84:34:
47:2e:23:75:d2:df:19:de:4f:1b:76:24:42:20:37:33:b1:99:
73:70:5a:34:63:d9:3c:d2:f2:20:c3:8b:a2:5e:8c:2e:8d:8f:
7c:85:f3:01:38:e8:d3:2d:21:88:06:1f:90:8b:69:43:ef:44:
71:db:e8:d8:ae:f0:eb:15:a2:10:84:ec:83:0b:21:b7:ef:a4:
41:14:11:e4:c1:f3:43:f9:e4:81:e5:7b:5f:e0:e5:47:7e:4f:
18:65:2b:d1:72:c2:96:6d:10:0e:c0:51:ce:5a:e2:4d:0d:91:
79:a9:80:52:be:45:76:0f:40:66:ef:9b:f8:91:7c:ff:f8:33:
a4:a8:7a:54:9c:15:f5:c1:87:55:b3:ad:48:86:5f:99:d1:3e:
16:49:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:40 2025 by rpki-client