Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/34587be0-801c-3456-af9f-aa43a46c930c.roa
File: 34587be0-801c-3456-af9f-aa43a46c930c.roa (raw, json)
Hash identifier: xW5sb7rLxH1SD4c5wkXHN1eLDghSEewPLSKE87ZGS2Y=
Subject key identifier: E4:B1:07:AD:FA:F0:F9:76:E7:04:74:49:C8:74:46:C2:5D:9A:54:77
Certificate issuer: /CN=55bf3e52-332a-4f98-b430-2ed284592ddb
Certificate serial: 010D0C9F4328584886B07C36F899599502A824E0
Authority key identifier: 99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/34587be0-801c-3456-af9f-aa43a46c930c.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 57974
IP address blocks: 192.41.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7c:36:f8:99:59:95:02:a8:24:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55bf3e52-332a-4f98-b430-2ed284592ddb
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=da5fa251-e7d6-4b08-8e0e-a5d23ee39c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b4:c2:d4:dc:59:a6:bf:f8:31:4f:33:a1:8d:
6e:fd:c9:c6:1d:25:64:77:74:d8:af:c6:c4:80:93:
56:4d:f3:fe:7a:75:a0:61:e1:85:18:15:dd:53:d4:
df:c7:4d:ef:8f:2e:2d:05:2f:7d:c7:5d:fe:c4:26:
b0:c1:c2:9e:8e:a4:3e:eb:4c:11:4e:31:45:af:03:
e0:b7:65:f7:dc:39:40:5a:60:07:a9:09:ac:cb:ca:
7f:e9:3c:2a:60:29:3d:f0:ef:87:91:b0:52:68:1c:
39:f1:fd:ce:11:89:49:ec:ce:0b:52:60:e6:5d:80:
33:bb:98:9d:0d:f0:5d:e1:0a:dc:95:88:f1:32:8b:
e5:52:8e:59:30:9d:5e:75:dc:68:40:ed:a7:9e:74:
53:fe:ba:2d:cc:e2:33:b3:15:41:65:55:ec:fd:39:
bd:ff:6e:c8:8d:83:04:f6:ec:ca:7c:1b:ce:0e:44:
29:52:51:47:d9:74:ae:28:7a:1b:82:8a:42:5b:ea:
a7:46:f6:e0:24:bd:86:be:cd:88:f8:50:01:68:0c:
c7:96:e1:fb:19:ac:8a:87:da:91:2f:fd:17:8a:de:
ec:55:89:5a:1a:cf:bd:4e:83:ee:69:ee:36:9f:f3:
66:4b:89:68:69:c7:d2:1e:af:b9:6a:12:89:79:cc:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B1:07:AD:FA:F0:F9:76:E7:04:74:49:C8:74:46:C2:5D:9A:54:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/34587be0-801c-3456-af9f-aa43a46c930c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.crl
X509v3 Authority Key Identifier:
keyid:99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.41.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:7e:fe:b9:e1:94:59:98:64:80:c8:e6:ec:d3:41:74:20:3b:
90:44:00:7d:20:6a:c1:8e:f9:fd:17:fd:2b:49:b9:a5:c3:47:
7e:df:d8:17:82:91:61:b0:fc:86:f6:f4:55:82:c9:f4:4e:c0:
88:09:e1:50:85:c9:cb:92:4b:89:da:26:9a:13:ee:ad:56:7d:
c0:42:9f:11:ce:26:46:f3:9f:b0:66:a7:c2:24:64:14:14:0a:
3a:07:4a:6b:74:29:b7:be:a7:f2:5b:c6:04:a9:6e:65:2e:27:
7b:b7:0b:b2:94:1e:16:92:88:cd:c3:84:a9:43:c4:26:93:b6:
5e:f9:99:75:59:9f:55:9d:27:d5:66:b2:0e:08:78:3d:56:20:
c9:c1:35:7c:0f:c2:ed:46:f0:74:5f:62:4a:2c:fa:aa:03:33:
06:10:0b:26:d4:9c:64:d9:54:72:bb:1f:1e:22:4d:85:a0:d0:
d8:bd:7f:9b:bb:90:2d:0b:36:f1:b3:1d:20:20:6e:2e:e0:ab:
cb:58:9d:d7:c1:17:41:12:b4:38:17:67:08:37:41:01:8f:4d:
86:5a:93:02:21:17:c0:28:70:a2:fe:eb:d7:7a:9f:8b:15:1f:
30:ce:80:cf:b9:7a:0e:ee:84:0e:48:b1:b0:b7:53:ce:9f:86:
e4:58:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:57 2025 by rpki-client