Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ea0d431d-21f5-319a-8cfd-d8a10f695194.roa
File: ea0d431d-21f5-319a-8cfd-d8a10f695194.roa (raw, json)
Hash identifier: 2hKe5q3ucgy5227fOcDukfDFVl6H40fNTvdDcg1Tf1o=
Subject key identifier: EC:4B:A6:35:38:7F:4A:85:1A:CB:5C:C2:69:13:B6:DD:FA:E5:43:C5
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584902EC1B5D17D2E748E6E08080
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ea0d431d-21f5-319a-8cfd-d8a10f695194.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16696
IP address blocks: 192.81.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:1b:5d:17:d2:e7:48:e6:e0:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=68c4488b-365c-4c47-bcec-b8f8fdf8b9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:16:85:1c:15:22:34:fa:f4:0f:14:c1:6d:05:
57:6f:c2:a9:d2:e3:e2:86:88:ab:0d:03:f9:f6:8e:
3b:05:0c:2f:3a:92:b2:73:c5:db:24:8a:84:66:bf:
b8:ec:bc:dd:2d:f9:5b:b7:0e:aa:e0:db:7d:2b:bb:
a2:8e:25:2e:b1:0a:a1:b0:14:3a:f1:f2:9f:fe:4b:
fa:f4:f7:b5:ac:9a:2f:57:04:61:dc:53:89:90:2a:
85:dd:fa:26:3f:f2:9e:19:9a:c8:3a:52:ba:27:db:
d9:11:62:1f:f1:ec:1d:85:55:20:85:50:98:53:f4:
26:a3:35:8c:01:58:c3:08:d6:5a:c4:e5:14:3d:6a:
1e:8c:cc:d4:8b:a1:8a:99:f8:47:9b:4f:aa:dd:60:
b3:95:5b:00:13:a2:1b:95:33:c5:8b:4f:31:4e:bb:
8a:9f:b8:60:47:91:01:04:43:8b:0e:c4:aa:f2:d1:
2c:30:a4:6a:2a:d4:a8:3e:60:63:71:06:4e:57:fc:
32:85:63:83:7f:33:a8:f5:99:4e:ea:f9:42:42:51:
ad:c7:f0:09:f9:9a:f7:54:2e:33:44:88:69:0e:9c:
f1:87:87:24:9b:48:e9:df:fd:5d:17:a7:a9:3b:2b:
90:f9:de:35:6c:98:68:00:1c:62:d2:d8:8e:26:e3:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4B:A6:35:38:7F:4A:85:1A:CB:5C:C2:69:13:B6:DD:FA:E5:43:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ea0d431d-21f5-319a-8cfd-d8a10f695194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:08:cf:3a:6c:d3:92:f4:82:f7:c7:6c:2f:5c:19:da:3a:e2:
0b:d7:d6:27:37:c2:44:82:88:b4:58:44:1e:ce:f3:94:3a:bd:
73:c8:28:6b:2b:97:2a:63:cc:ce:26:6c:97:cd:58:c1:2c:f1:
1b:d6:f5:f1:c8:2c:45:04:af:44:11:cd:77:20:7a:c2:3c:d2:
44:be:e9:d3:17:09:dd:82:e8:e1:70:a6:33:ec:98:9e:ba:34:
94:59:33:2f:14:55:d9:00:e0:f2:f2:2c:7d:aa:7b:1d:b1:50:
21:bd:85:15:d4:b8:97:0e:99:ee:a7:70:01:7f:c1:2a:ef:14:
9b:9b:a8:25:4b:b3:d5:59:a1:75:52:b9:5a:c9:41:99:ec:df:
b0:81:c3:86:ff:c0:0e:5d:ad:97:f7:db:c3:ba:d8:c0:0d:8b:
fd:08:8e:df:60:ff:b2:da:58:f9:c8:b0:8f:e9:73:15:9e:45:
1c:cb:7d:4e:04:d3:52:1a:81:e6:93:6b:19:9e:72:80:64:6f:
9c:83:e9:07:4a:a1:49:6b:60:0d:80:2a:9f:51:9d:4b:68:5d:
7e:e4:b3:52:41:1c:c1:e4:97:31:bf:fd:bc:71:d6:f3:8c:90:
7c:6f:88:5a:96:c7:8c:32:46:f7:2e:33:d2:a8:c5:ec:2d:8e:
e2:55:0d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:29 2025 by rpki-client