Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa
File: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (raw, json)
Hash identifier: vOAni6H1lunQ1cY3c/gd3CIJupByB/QgzDaP5TqbHT8=
Subject key identifier: 1F:D5:E0:A0:BB:35:A3:49:88:D0:50:FB:E0:F9:DF:73:B7:75:80:A3
Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082
Certificate serial: 010D0C9F432858493243DCB0D3FFE61448196E40
Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 395464
IP address blocks: 192.68.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:dc:b0:d3:ff:e6:14:48:19:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=f46d0d2f-2ed8-45ea-a95f-d892bc5a23ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5d:c8:05:f0:c8:d1:9f:8a:78:80:ee:b2:0f:
1a:93:24:55:f8:44:b6:35:96:30:80:61:cc:c9:a2:
f9:88:30:f2:0b:13:d6:fc:11:f3:ee:89:32:48:b2:
0b:83:8a:19:37:ac:5a:71:2e:42:45:e0:29:87:25:
56:63:97:8c:11:3d:e3:03:c1:d3:85:df:d8:6d:ae:
c2:1f:61:4d:61:33:66:e5:24:8d:03:98:8f:5c:71:
1b:81:b1:8a:f0:00:83:46:30:46:2a:de:04:c4:ee:
3b:6c:7c:79:a1:1a:b5:3e:f3:cf:7f:cc:00:bf:8c:
70:3f:27:17:6f:fd:8d:ca:ad:1c:a7:8e:7c:d8:35:
00:86:5e:a3:11:b3:9a:5d:a2:bb:30:58:2d:ff:ac:
f7:cd:99:7c:6b:4f:00:b5:c0:84:b7:13:2c:83:6a:
6d:24:52:d4:2d:b5:89:38:20:e6:4f:73:25:5d:8c:
a5:0b:7b:9f:0c:23:57:4e:e0:d8:00:ab:8e:78:ad:
df:51:e6:8d:1a:0c:2c:45:28:3c:b9:ec:63:f0:59:
1c:7c:68:a3:58:9f:e5:d0:7d:c3:25:d0:8b:9b:17:
07:3a:f6:23:c5:32:4e:d8:1c:20:e1:7e:dc:5b:47:
75:a4:43:62:9f:73:c6:36:df:7d:d5:c6:b6:43:9a:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D5:E0:A0:BB:35:A3:49:88:D0:50:FB:E0:F9:DF:73:B7:75:80:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl
X509v3 Authority Key Identifier:
keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:a8:b6:1b:fe:83:57:a3:4a:1a:ce:82:e0:fb:04:9c:13:a4:
13:2c:3e:e8:89:63:bb:a2:14:2b:ec:bb:ed:da:95:d5:d1:6d:
64:8c:b7:fd:02:b1:e6:24:30:13:b3:f1:38:ee:60:fa:05:b0:
cd:52:1f:18:69:e0:6c:01:b6:1f:51:8c:72:0a:85:dc:b0:57:
fc:81:bb:01:ca:ad:c3:8d:03:20:59:1f:e5:92:e7:90:6d:bf:
b2:d7:7b:e4:04:c6:2b:db:22:23:31:cb:31:9c:ed:01:39:0d:
b2:11:cc:b9:9e:3f:b1:99:3a:dd:62:ad:42:48:3f:2e:3b:f3:
f4:0f:a0:7d:bf:06:00:82:45:20:95:7d:df:5d:b4:56:0f:e9:
3d:09:a3:02:48:a8:f2:1b:b3:5c:7f:67:ee:14:fe:29:80:1c:
f6:87:62:88:de:14:8a:fa:57:22:45:91:ac:da:ca:49:6e:7d:
1a:55:8b:87:8e:3b:de:5e:26:c6:7a:7a:e8:97:35:3f:7d:2d:
8c:d6:a2:d0:b8:27:05:b2:8c:ac:1d:a5:48:a1:3c:44:be:90:
72:35:20:43:e3:92:80:51:14:74:88:df:55:d8:1e:41:52:c0:
cd:e6:fe:8b:d8:f0:ab:f5:ad:cb:38:0e:88:ba:b0:5d:2e:82:
01:18:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:50 2025 by rpki-client