Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa
File: f99df0ee-55c6-30f2-9f70-4715143eb655.roa (raw, json)
Hash identifier: f90YfQbowXR/mdiSVqfW5LenNuIjao6AH6loN0vZ9F8=
Subject key identifier: 6D:09:B1:3C:9B:12:91:9D:15:4D:58:4C:30:AC:06:49:36:F4:7F:F2
Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial: 010D0C9F43285849350E9272296701DA18A201F0
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 396905
IP address blocks: 192.82.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:92:72:29:67:01:da:18:a2:01:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=433f595a-7297-4264-b9f4-7bfeb43ed4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:39:13:70:ac:ff:80:d5:5a:67:ea:b1:7b:
34:33:3c:c0:b0:af:b0:ea:67:78:ef:e6:22:95:d4:
9d:b5:0b:ca:cc:33:b9:54:ee:a2:f0:c6:b4:cf:0b:
09:d6:02:a1:a5:20:ae:84:8d:14:15:45:e6:37:c0:
bf:cf:1b:f6:12:71:23:83:27:7d:0b:bc:d2:33:8c:
0d:76:f9:32:9d:f6:8c:59:8e:04:7d:93:e3:02:ab:
ab:54:95:e2:e8:32:cf:ef:bb:0a:31:96:07:79:89:
f1:8e:29:93:d7:50:2b:e1:f4:41:58:0b:ac:6d:cd:
20:b2:d6:e3:7e:c2:27:50:68:77:05:d7:ad:a2:85:
48:4e:71:e5:37:ca:ed:05:5f:67:28:c7:20:e8:29:
41:6e:53:48:ed:83:98:72:81:d8:ea:26:1e:9f:3a:
89:b3:e6:c3:8b:97:fa:95:85:6a:4d:e8:20:52:34:
6a:5c:21:89:0f:04:86:19:9d:39:ee:fa:7b:6f:c4:
c7:62:89:c2:fd:5e:f6:8a:51:61:54:55:2c:ff:69:
66:66:01:08:d9:7a:18:66:a4:24:32:bb:22:56:de:
78:14:dc:ef:0f:cf:96:3c:d0:cc:49:9c:90:da:9b:
b4:22:79:67:56:53:59:28:e6:a6:65:87:d5:b0:b8:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:09:B1:3C:9B:12:91:9D:15:4D:58:4C:30:AC:06:49:36:F4:7F:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
X509v3 Authority Key Identifier:
keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
sbgp-ipAddrBlock: critical
IPv4:
192.82.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:46:80:31:5d:82:a0:7f:38:7b:a8:64:bb:12:a2:99:c1:84:
c2:14:e2:e7:e3:17:b5:2e:32:2e:ef:69:a5:dd:3f:63:3a:00:
18:35:c1:5c:3a:0a:22:e8:71:d0:56:a9:4a:af:ff:fb:45:d7:
c0:b2:b0:ed:98:f1:1f:d4:a2:19:fc:9d:a2:3c:63:a5:8e:13:
e1:cd:4a:83:a2:1f:11:c7:84:66:f5:89:05:a3:c3:3a:d0:10:
b8:e7:b2:b6:52:75:69:34:49:c3:f9:3c:75:87:aa:e2:a5:4b:
ca:f4:6b:8c:cf:99:55:a4:14:54:b8:53:6f:6b:69:96:01:30:
3e:70:11:04:47:d7:d9:62:cc:05:fb:0a:f5:91:4b:f1:6b:ac:
fa:8f:73:b2:8a:6d:2f:dd:df:85:65:5e:a6:37:3a:4e:f2:70:
53:1c:a7:27:99:27:c0:dd:be:52:83:d0:3c:52:3c:cd:b8:31:
73:06:a1:c7:e5:d6:cf:1f:ca:58:50:c6:d8:0d:de:34:64:16:
4a:18:d0:a9:e5:17:e0:4e:f5:26:9c:1d:24:cf:5f:85:da:65:
5e:fe:35:f8:69:f2:e8:e8:14:d6:ee:8e:23:49:d1:4e:25:fa:
e7:d4:6a:94:18:ae:05:28:67:d8:c0:71:5e:38:10:3d:8b:07:
e3:71:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:32:07 2025 by rpki-client