Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa
File: acc5bd5d-5f68-3673-813c-63c52d3a1683.roa (raw, json)
Hash identifier: gYdQHtQ4p+oM//HB9Ljz/KrETePuv7+UJN6a8yYp0Jk=
Subject key identifier: C6:A9:1D:09:9C:74:84:86:C0:F5:4C:55:40:0B:EA:BC:7B:85:F3:EB
Certificate issuer: /CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5
Certificate serial: 010D0C9F432858488AE0A4DFF82B303CFFA2E780
Authority key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 21521
IP address blocks: 192.252.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a4:df:f8:2b:30:3c:ff:a2:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=5d9f679b-38b7-451e-a2c0-d9acd1f43dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:58:d8:2c:63:17:76:8e:64:b9:fb:f2:74:
2f:97:16:50:6b:41:cd:84:0b:32:d7:f2:dc:27:aa:
23:a0:b0:31:aa:e7:c6:8e:b8:bb:7b:10:b2:0f:ad:
12:45:96:50:bf:b1:21:c4:e2:93:e6:52:e1:bc:14:
25:2c:a5:7d:7e:0f:ac:c1:0f:63:7c:85:e5:6c:9b:
38:8e:75:d8:01:05:7f:48:0f:c1:99:d9:2d:4a:29:
a4:4b:ff:ca:63:02:71:41:33:ef:8d:d2:4a:3b:61:
5c:48:9a:a0:42:39:79:42:e0:a0:74:f0:67:c0:88:
81:14:c3:ac:c9:1f:4a:91:4f:66:f3:71:73:ef:42:
8c:79:17:3f:c8:cc:5f:8e:ae:45:38:59:d1:3f:98:
9f:76:89:b7:e4:f4:a4:a2:63:83:2f:85:5e:11:60:
07:fe:d6:5f:04:6e:d8:c5:5a:1a:15:16:0a:fe:c5:
78:1a:cd:be:28:0f:0e:ab:dd:57:81:28:23:85:0d:
03:88:29:7c:2f:44:87:65:b6:43:24:04:6a:82:a8:
88:98:da:34:f2:46:bc:17:91:dc:24:3a:25:41:5a:
11:84:25:48:21:88:59:f1:0c:06:71:90:6a:fc:68:
e4:a6:b8:0c:e4:ae:f2:9a:7c:5c:d2:2b:01:9d:1b:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A9:1D:09:9C:74:84:86:C0:F5:4C:55:40:0B:EA:BC:7B:85:F3:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl
X509v3 Authority Key Identifier:
keyid:8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.252.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:72:9f:e9:3c:8d:16:9e:76:a7:86:7c:3a:62:00:d8:dc:e5:
20:0f:25:bf:a5:35:c7:5b:d1:fc:10:4b:6b:b9:0a:05:93:97:
a1:55:cb:c9:ed:09:b9:48:2f:ff:9c:52:ce:f1:08:bc:02:14:
4a:25:85:6e:55:2d:ac:86:93:00:bc:a0:90:e5:0d:02:44:17:
d9:10:41:a3:8d:c4:21:41:46:83:55:e4:84:1a:f5:3e:2b:bd:
c5:fb:f4:89:36:e5:8d:f5:4f:fb:7c:b3:b0:f2:28:94:5b:15:
51:d7:04:43:79:dc:e4:6f:b5:55:d9:33:2f:e7:fa:22:88:5f:
7d:34:ae:2a:5f:3c:f5:c4:4e:fb:28:6d:c2:bf:c2:e4:d0:67:
0f:82:60:7f:b4:95:6e:ad:20:17:62:0c:c5:34:b9:41:e8:c9:
e8:f6:86:9b:19:65:52:f8:0f:7f:c2:59:67:08:8d:ec:84:ee:
e4:d2:6f:25:a0:b6:28:a2:96:24:26:e3:8e:8b:07:f6:46:f6:
35:d4:63:5e:84:3c:b4:61:36:de:33:7e:54:57:ba:57:eb:7a:
53:37:a3:f5:f8:f4:d8:f5:c1:52:ba:b3:f1:84:57:93:40:da:
d7:16:88:41:de:94:06:5f:ef:3e:e2:38:34:36:af:fd:db:21:
59:c8:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:25 2025 by rpki-client