Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/19666a1a-e9f7-372f-b91a-430ebf090625.roa
File: 19666a1a-e9f7-372f-b91a-430ebf090625.roa (raw, json)
Hash identifier: PrWh1VHR6Y5+LKPl1Ho8JfC6dtjfVU/INFRjatB6OZM=
Subject key identifier: CF:75:49:04:8A:C2:9F:5D:62:0F:F6:6A:DE:90:89:BC:2C:C3:22:3D
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584957F40A4418A22BE32875BB00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/19666a1a-e9f7-372f-b91a-430ebf090625.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11290
IP address blocks: 24.75.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0a:44:18:a2:2b:e3:28:75:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=f867e17a-dde6-41ab-8aa4-f3e4a53c5ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:7f:0e:fb:ff:58:aa:80:37:75:77:1f:ad:
dd:e0:9a:71:6a:2e:d3:77:54:e5:23:fa:92:ca:62:
d7:f9:25:0a:b7:ee:bc:c6:6e:c6:79:eb:ea:7a:e9:
87:e2:c3:26:c5:85:b7:8f:ae:b4:2d:fc:8a:ac:97:
07:eb:d1:82:c7:ac:cf:dc:51:5c:3b:c5:91:ce:96:
12:c1:71:bb:0a:d2:1d:32:7e:b8:ca:a3:de:3a:e1:
df:98:a2:e8:21:3a:d1:83:3e:fa:16:6e:ed:9b:de:
8f:02:2d:cd:06:06:85:d3:0f:37:c2:ac:95:de:3f:
89:18:d4:7d:47:3e:d4:fa:8f:d1:a8:ae:8c:81:7a:
86:99:e8:83:98:b9:97:e5:70:6b:2b:49:a8:a2:87:
a8:01:27:58:af:4b:c3:fc:88:ee:0d:46:63:0d:3f:
a6:40:55:d5:d7:b0:44:ec:fa:08:ca:59:c8:cb:e4:
00:2c:f0:37:43:eb:ee:02:55:e5:e7:47:b7:c6:b6:
fa:24:67:e8:df:c4:8d:17:a9:2d:a2:a2:77:68:16:
c5:87:37:17:61:9a:22:e4:82:0b:f7:bb:74:87:7b:
41:10:6f:ee:d9:87:1a:b1:e7:71:4b:39:83:b5:a3:
c2:f6:35:c5:69:5c:13:a8:29:76:96:8a:4e:75:a1:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:49:04:8A:C2:9F:5D:62:0F:F6:6A:DE:90:89:BC:2C:C3:22:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/19666a1a-e9f7-372f-b91a-430ebf090625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.75.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:a7:b3:02:0a:0e:35:f1:2f:ce:37:b6:32:81:32:4b:d0:05:
e1:d0:27:37:ee:6a:25:63:ce:89:8d:3a:db:77:90:a2:d6:c7:
48:f8:2e:9a:23:31:fb:13:5f:09:63:47:2d:52:d2:6d:87:d5:
b2:f6:07:63:85:a7:2a:ab:f9:59:0f:43:57:03:75:f3:8f:77:
d4:cf:c6:3b:c7:39:94:96:54:7b:fe:d9:12:59:ac:2a:61:e6:
53:80:98:fa:8f:96:51:4f:de:8e:e5:d0:91:70:4f:df:cd:8d:
6c:12:6f:06:4e:15:2c:8b:3e:d8:ba:e7:4b:f5:31:50:4e:f6:
ba:62:1a:c6:95:ce:35:12:fc:1f:4a:9b:b4:51:38:d4:10:75:
bd:bc:78:23:26:c3:dd:77:13:f7:67:eb:9c:f3:1b:4f:d9:26:
90:a3:73:01:31:f1:85:7f:68:d1:89:3e:c5:48:2c:3d:09:e0:
ff:3b:ad:d3:06:b5:7e:ac:dd:e5:d3:02:b5:db:b3:4a:e2:2f:
de:f6:1d:b3:73:28:f3:a6:d6:93:82:eb:6f:92:06:4e:6e:d4:
8a:2d:59:fb:1d:24:37:99:86:7f:c9:03:84:ad:75:24:e5:77:
28:44:35:98:59:c7:88:33:cf:0b:6b:54:8a:b0:ac:42:41:09:
07:3a:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:03 2025 by rpki-client