Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa
File: de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa (raw, json)
Hash identifier: Ns9qDOJ9AweuPsa2etNANf30rT6BbY1K7+JkOf15QJ0=
Subject key identifier: 07:D5:42:3E:9F:E4:DE:45:D0:AA:91:F2:A1:2C:64:D6:96:BB:A1:DA
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848E16BC4634AC9E212733F0BC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 396356
IP address blocks: 192.253.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:c4:63:4a:c9:e2:12:73:3f:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=3224833d-bca5-4935-bd13-1eec6551471f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:be:09:64:eb:9a:f3:48:00:e3:95:b6:b7:
05:3a:5d:66:13:5b:23:5c:a7:86:80:63:1e:d2:6e:
87:f4:a3:c0:69:be:8d:d1:e1:cc:db:b6:28:ae:bf:
e1:4b:96:c1:87:f7:1f:ca:fe:e5:6a:76:fd:ed:fd:
4d:c3:33:c0:2f:3f:b0:e5:7f:c0:42:d4:13:f5:46:
f2:2f:f4:73:37:0c:df:51:51:54:f1:d8:fd:4b:94:
c0:d7:78:91:51:a1:f1:28:74:70:97:89:fc:c0:6e:
b4:08:14:e9:c8:3f:21:1b:9d:07:72:96:66:b5:fd:
46:f3:92:3b:82:2a:fa:7f:2c:6e:e7:95:bc:10:d9:
6f:b0:2c:40:36:7e:3b:d6:fb:01:d2:0e:f2:7a:7e:
f6:b0:ee:e1:3e:93:a5:9c:33:66:3f:57:42:2d:da:
78:b0:b3:44:61:00:60:73:0d:3e:02:8b:bf:46:8a:
e9:84:64:87:84:6c:1a:82:9c:fd:bc:9e:b5:35:36:
ec:dc:de:c5:51:db:77:25:e3:5c:a0:02:75:56:6f:
81:d6:3b:d9:d4:51:65:cd:cc:c0:f6:f4:ca:74:2f:
dc:1f:5f:08:e9:5b:a8:83:79:22:18:98:cb:49:6c:
eb:61:39:7a:fd:60:50:d1:1f:41:4d:86:07:ef:30:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D5:42:3E:9F:E4:DE:45:D0:AA:91:F2:A1:2C:64:D6:96:BB:A1:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.253.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:0e:af:6f:6c:3e:5f:3a:d8:b2:58:54:95:c1:3d:e3:70:4b:
97:f4:58:80:70:45:a8:0a:24:c7:c2:f5:d4:b2:f9:33:a5:06:
d1:01:46:44:d1:20:b5:97:08:01:f4:1a:a2:21:eb:7e:fe:57:
9f:98:59:55:5d:f0:1b:af:55:62:a6:db:6b:7f:85:39:74:b6:
ce:00:50:9f:d4:07:6b:d0:d8:b1:1a:06:59:d9:49:c5:87:7c:
2a:df:0b:c3:1d:f1:9a:23:9c:83:df:ef:8e:75:9e:35:05:a7:
19:6a:fd:a7:58:2a:15:21:39:f3:64:82:ae:e0:28:73:dc:5f:
c8:74:85:45:58:d2:15:0f:de:8a:8b:fc:78:ab:74:dc:b5:9f:
e2:cc:08:e2:3a:f2:f5:b8:70:d2:06:e5:37:17:cc:39:e1:79:
ee:cc:4d:16:91:4a:d0:29:16:83:2f:f6:90:4d:46:83:99:bf:
31:38:9c:75:0c:60:e5:2c:2b:d5:6b:86:d7:3d:04:0b:ad:89:
c4:b7:27:ea:76:d1:3b:43:23:17:f2:de:1f:19:d8:a3:9e:aa:
05:a4:11:e5:48:5d:99:90:2c:0f:86:b6:e1:5e:b9:f7:dc:68:
a7:4e:0a:b6:1c:5a:5d:3e:57:24:d5:57:fc:2b:14:eb:58:27:
fb:ba:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:22 2025 by rpki-client