Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/d351544d-1465-368b-a720-b72da3c2c805.roa
File: d351544d-1465-368b-a720-b72da3c2c805.roa (raw, json)
Hash identifier: 0l93ptsDUMzFqhdMAlNQ5bBOE4QBoPT2HOJYOTYGteg=
Subject key identifier: 47:92:FB:98:F5:CD:B7:7B:5D:EA:8B:A9:F5:F5:12:39:85:94:D2:9B
Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial: 010D0C9F43285849244E790B63A1BF4BF3017F80
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/d351544d-1465-368b-a720-b72da3c2c805.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 55
IP address blocks: 192.5.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:79:0b:63:a1:bf:4b:f3:01:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=955dff83-9721-40db-9d89-ea7372cf69f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:35:73:33:d2:f3:b4:08:2f:4c:8f:f8:f4:5f:
9d:8c:e9:cb:ce:a9:9f:fd:c5:19:da:ea:f5:90:73:
ca:e3:95:18:67:48:09:7c:e9:51:66:6c:73:17:a2:
48:78:bd:0e:42:67:0d:b3:8a:d1:d1:db:7f:e1:10:
b9:b7:0f:38:4e:6e:0e:90:d8:0f:c4:fd:8d:16:ae:
ac:fe:78:4e:53:92:09:7d:58:db:99:d3:72:47:84:
3b:d3:e6:b3:89:ac:89:c9:be:73:6d:ca:25:aa:04:
f7:89:60:f5:a4:70:8e:53:98:26:f9:28:e9:de:e7:
9f:be:13:93:44:d2:bf:d5:f7:52:4b:aa:30:19:f3:
eb:c4:b6:fb:80:37:d9:f8:d8:4c:44:ec:bf:5c:39:
7b:60:ff:1c:fa:c5:94:f3:da:86:14:7a:ab:04:0b:
58:3a:91:33:de:5f:c1:37:35:3e:66:ea:5e:96:d6:
d4:f8:1f:3f:1d:fd:2f:54:f0:ca:6a:e8:86:b9:63:
91:76:a8:b2:b5:61:e1:f8:44:99:28:4d:29:52:a7:
3d:95:d4:52:6d:44:6d:81:5c:3a:16:dd:94:51:4b:
ab:8c:e6:2d:c9:c8:10:25:c5:cd:42:60:a6:47:4e:
7a:3e:ce:09:c1:dc:20:b6:40:bc:42:8f:d8:7c:34:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:92:FB:98:F5:CD:B7:7B:5D:EA:8B:A9:F5:F5:12:39:85:94:D2:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/d351544d-1465-368b-a720-b72da3c2c805.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
X509v3 Authority Key Identifier:
keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:fe:85:27:dc:cc:56:51:ad:f7:ee:ad:7f:7d:22:ca:53:21:
b5:b0:21:c9:22:71:51:57:9c:e6:ae:8d:3f:ec:ad:61:23:94:
7a:e6:3e:c4:86:9d:34:ef:21:fa:86:da:fe:ed:05:58:f4:17:
7a:14:c1:9d:94:19:10:7f:7c:ec:e3:19:3a:78:a8:5a:a3:b1:
54:f3:af:80:6c:fe:95:c4:1b:e8:41:cc:e8:16:74:71:28:c7:
75:73:81:b5:d5:fe:58:a9:ea:c9:4b:4f:c0:70:2b:ce:f9:b2:
67:5b:1f:21:a6:72:7b:d9:c6:ad:8d:8f:81:08:e4:07:10:a9:
e3:4a:5c:9d:6d:91:48:90:23:e9:c6:20:86:e4:a2:fb:eb:d9:
ce:bc:c4:71:d5:1b:24:b5:e2:00:f5:28:b9:b9:2a:0b:a7:f1:
94:f5:a2:de:b0:88:b9:20:f8:67:32:eb:23:fd:89:94:29:ca:
18:fa:22:0a:40:94:0c:ef:9b:ba:e6:04:24:5d:24:58:46:c4:
d1:1d:e3:61:de:39:8d:a2:f8:7d:3a:fa:33:56:4b:ce:bc:98:
dd:3e:ea:7c:70:78:79:d3:f7:28:a2:bc:35:ec:d1:5e:40:80:
41:30:3d:b7:15:fe:58:5f:ea:2e:34:81:9e:fa:3d:81:f6:57:
a4:97:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:25:26 2025 by rpki-client