Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa
File: 5965b031-ef34-3104-aae4-6e476d645778.roa (raw, json)
Hash identifier: imMBB6Jp+fG9SZRZs/gWEbME3Mv8d0mP0uto9eA2itw=
Subject key identifier: 65:C0:BE:AC:E2:CF:61:19:2B:23:50:32:C8:17:7E:61:30:A1:E2:E7
Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80
Certificate serial: 010D0C9F432858490B4C26CFD77932AC35AAB300
Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 192.48.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:26:cf:d7:79:32:ac:35:aa:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=63c7ced0-842a-476b-90a6-a9e95f48a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:0b:6b:5e:2e:09:78:0e:1b:dd:55:18:1d:
0e:73:5b:af:00:77:cc:8a:9c:34:ee:67:60:88:95:
7a:e2:46:1a:76:08:fa:75:e4:8d:67:fd:38:e2:e4:
4e:b0:63:e9:2a:c5:9c:85:72:66:a3:f3:3b:5d:db:
0a:e2:a6:dd:d7:d3:75:f7:a2:16:36:8b:06:9c:86:
34:51:cc:1c:a0:e9:bb:e9:f6:c9:c5:46:0f:77:5d:
1f:f6:9e:eb:e0:e9:4e:c9:3a:62:6f:c1:f3:ff:64:
5f:89:38:21:95:25:12:bc:10:ee:63:5b:82:c7:21:
e9:25:78:bb:1a:2e:46:c2:2f:92:1d:0b:43:98:34:
4d:12:36:87:31:79:b7:f6:71:9b:a6:ef:6e:ef:e3:
a3:80:8e:e5:5b:67:da:01:bb:fa:59:70:03:7b:b7:
00:b2:49:14:f1:03:5d:ef:96:36:b4:bb:c3:13:11:
8b:78:ba:9f:8b:ff:53:2a:3c:a8:38:c9:00:19:ab:
2b:c9:eb:92:09:2d:81:5b:37:11:17:64:78:a4:5b:
bf:be:72:70:2a:44:d0:19:67:34:38:36:4b:f9:e2:
37:e9:54:c5:b5:a7:79:b3:db:ed:fd:f1:7a:b5:f9:
35:7a:f3:17:af:5c:18:d1:67:2c:0f:81:3b:20:53:
74:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C0:BE:AC:E2:CF:61:19:2B:23:50:32:C8:17:7E:61:30:A1:E2:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl
X509v3 Authority Key Identifier:
keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer
sbgp-ipAddrBlock: critical
IPv4:
192.48.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:23:1d:40:6c:6f:28:7d:8b:66:5d:e4:6d:19:86:6d:f7:81:
e8:34:e3:07:70:c9:4f:e2:ee:7d:41:de:1b:8a:a8:d5:fe:1a:
b2:d8:61:cf:07:9c:0c:f8:26:4b:b7:01:be:9c:f7:1c:72:33:
b4:42:8e:64:e8:77:c4:ee:4c:ed:30:ef:4f:c9:01:51:af:e3:
37:22:b2:d2:10:3f:45:7c:0e:99:ec:09:03:d6:18:9e:4d:25:
98:fd:34:cf:4c:8e:f6:36:0b:5a:79:65:c2:f6:f6:5f:cd:0e:
fc:65:b5:aa:b1:fb:0c:40:72:c9:d7:76:c3:b9:77:3a:17:e9:
f1:74:13:3a:78:6a:ee:51:2e:e1:ce:43:9c:e2:bf:34:ca:ad:
c0:6d:25:67:fb:cd:25:86:a5:5e:67:9c:d2:63:50:cc:b1:38:
bf:cb:aa:3d:a3:4c:39:28:82:87:32:6c:68:45:8d:28:f8:3f:
fb:94:d1:27:c9:8f:ca:10:4a:ca:aa:3d:9b:15:ad:28:a0:a1:
f7:d4:3f:61:86:b0:8b:e7:5a:53:05:a1:99:f6:e4:67:23:7d:
c7:d0:61:a7:19:f7:d3:f7:e9:7d:4e:f1:e1:dd:3f:57:59:b9:
83:d4:1a:e5:a1:3d:78:1a:47:06:60:30:ad:49:3f:56:79:4c:
2b:71:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:59 2025 by rpki-client