Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6db948b3-e863-30c3-ad29-2eb3c50558df.roa
File: 6db948b3-e863-30c3-ad29-2eb3c50558df.roa (raw, json)
Hash identifier: QSPzvGKHJmUxHV0M3OQOAvl5vMq7VfGW5q2U5zvuL64=
Subject key identifier: B9:B5:EA:62:23:8C:11:91:EC:F3:71:77:4D:6C:86:37:E6:DD:4C:09
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848A1361E44EB43F094BF0A1C00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6db948b3-e863-30c3-ad29-2eb3c50558df.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 212238
IP address blocks: 192.253.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1e:44:eb:43:f0:94:bf:0a:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=040c6d09-cd81-4c09-a7ee-cb34be76f679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:62:14:e9:8d:95:64:58:5d:d8:90:97:59:
12:11:0e:d5:08:61:45:a7:ba:0c:4c:6a:03:27:18:
0b:5b:18:3e:81:16:f2:b2:67:c2:a2:b0:ae:9e:c5:
9f:78:2c:f2:6c:6c:55:30:b6:23:cb:89:a3:c2:2b:
2e:4a:67:31:26:bb:2f:a3:59:6c:21:95:31:6e:a4:
f7:ee:7e:7e:2b:db:1f:5e:41:28:6f:09:76:33:30:
29:a8:4b:6f:9d:48:84:e2:ec:40:96:2a:6c:66:5b:
dc:c5:b2:b3:1c:34:b9:b7:ba:ee:64:30:5c:34:04:
9f:56:2c:52:9b:f4:00:47:4d:7f:ba:3c:00:af:41:
75:2a:d7:09:07:e5:ac:7b:92:f5:1a:58:f6:d9:63:
c9:7b:9e:09:2b:93:85:80:eb:9f:86:f0:8b:8a:d5:
65:65:4c:23:d2:f2:60:15:cd:6a:a1:ac:88:c9:27:
14:0d:97:fa:85:98:79:b7:d5:4d:12:c1:d2:7f:79:
2e:bc:6e:db:be:07:be:c9:44:15:d4:6d:07:55:90:
2b:da:b5:0b:75:2b:bb:35:52:42:4d:3e:c2:b4:2f:
59:53:00:94:dc:0a:84:34:13:89:ac:09:8b:a8:74:
f9:59:e6:00:c3:cc:57:31:f3:89:2f:49:bf:9e:bb:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B5:EA:62:23:8C:11:91:EC:F3:71:77:4D:6C:86:37:E6:DD:4C:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6db948b3-e863-30c3-ad29-2eb3c50558df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.253.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:22:e5:0f:94:ec:1e:04:cd:b0:13:19:d1:9e:5c:e9:ca:82:
52:0e:34:a4:2c:7e:f4:d4:2f:ad:44:4f:6b:a8:b7:68:d0:63:
c2:65:b2:37:2f:c6:22:e3:cc:d6:03:0a:ec:c1:12:ae:96:70:
fb:b2:ed:21:c9:86:5c:89:f7:23:b3:98:c2:35:a0:bd:de:10:
a0:6e:d1:6e:6a:c6:5a:7e:38:3f:e8:81:04:d0:c6:e2:37:71:
6e:96:03:ea:b4:72:6e:12:b2:e5:a0:d8:2e:ac:cd:5d:bb:c9:
8a:37:36:1f:20:4b:51:e0:b2:4e:28:fc:51:36:1e:ae:37:32:
b2:08:d1:5b:41:8b:e6:f1:c3:22:34:d4:b1:e0:f8:a2:2e:ca:
e3:15:a5:80:f4:f1:9e:86:b1:fc:86:80:7f:d5:dc:67:f4:31:
4b:98:81:41:cf:c6:e0:b1:99:55:d1:37:56:b2:fd:87:00:2f:
bf:b6:98:20:00:09:41:f0:d6:6e:b6:ec:3f:e4:ab:64:0b:9f:
fa:94:e5:34:82:37:a8:58:59:0a:fe:43:b4:5e:d9:20:7d:05:
82:7d:34:45:22:08:fa:1b:b9:4c:41:b0:df:10:75:07:95:51:
bb:b2:d2:d0:54:76:36:d8:55:2c:1b:eb:c4:58:e7:e7:a9:47:
34:91:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:45 2025 by rpki-client