Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/50bfd9a7-3e19-32a7-9065-2539ecfbf37b.roa
File: 50bfd9a7-3e19-32a7-9065-2539ecfbf37b.roa (raw, json)
Hash identifier: JUCBP+n+oYVYsyo5bO6PJo/B4hhLZy11sIRm5n00NPg=
Subject key identifier: 0A:46:3D:85:C7:58:C6:71:4E:13:B1:B6:44:A8:BB:98:D9:9D:46:C3
Certificate issuer: /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial: 010D0C9F432858491D717D5115F94726E68DE380
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/50bfd9a7-3e19-32a7-9065-2539ecfbf37b.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 62575
IP address blocks: 192.243.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:7d:51:15:f9:47:26:e6:8d:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=4ebd787b-a22e-48cd-91b7-13336215821e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:bc:9c:b8:b7:84:2f:58:f2:7d:0d:42:ef:
d5:2b:25:80:fa:e4:42:a2:51:9f:f0:c2:59:45:e3:
88:6c:c0:31:80:bf:08:28:43:78:b8:7a:61:21:2d:
b3:8f:2e:fe:69:62:f9:42:d9:56:1c:f5:17:a2:ab:
02:01:3a:68:ed:49:7f:cf:86:79:64:6f:42:4e:f5:
6f:ab:a1:6c:7d:fb:41:ea:ff:2c:cf:4e:a9:51:d7:
1a:79:b9:0a:f3:84:7d:83:fd:56:09:3a:b7:85:52:
1e:90:5e:10:ac:45:27:e0:dc:99:a1:46:c8:5d:32:
9e:03:1c:e3:77:e3:cd:0c:fc:37:b3:b1:97:f1:7f:
22:9e:70:73:8f:2c:51:c3:be:e8:57:88:5e:df:ad:
f1:3a:c3:29:cc:76:21:07:1b:fc:9a:ce:d4:9c:4f:
0f:0e:9a:fc:4e:9a:43:a6:64:f4:22:c4:96:3e:40:
ac:fd:dc:28:90:ec:23:92:09:c6:e8:48:97:44:68:
30:45:4e:c0:22:ef:00:42:a9:63:bd:7d:fe:fa:f4:
94:15:aa:83:56:fc:bb:a1:d4:36:b9:a1:57:d1:7f:
d2:64:fd:81:b3:30:86:ae:f6:5e:f6:63:bf:25:a3:
77:06:06:a6:a0:26:bb:c6:ae:b3:d0:9d:fb:65:27:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:46:3D:85:C7:58:C6:71:4E:13:B1:B6:44:A8:BB:98:D9:9D:46:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/50bfd9a7-3e19-32a7-9065-2539ecfbf37b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
X509v3 Authority Key Identifier:
keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
sbgp-ipAddrBlock: critical
IPv4:
192.243.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:6b:2c:6f:56:28:03:ea:9b:11:8d:c3:e7:bb:02:74:37:f2:
aa:30:be:92:72:57:c3:a9:03:c9:55:66:d1:db:8b:00:e2:65:
f6:64:90:1a:bd:5c:66:b1:74:1a:86:8c:42:1a:95:dc:b0:67:
fb:f5:81:55:28:89:3c:d1:09:71:fb:0b:5e:ef:c1:43:b4:74:
03:67:85:d4:2d:1b:fe:ec:b3:1e:74:ee:9f:4b:e0:7b:b9:e1:
42:01:82:fc:64:40:6d:75:59:11:43:2f:f8:90:5b:2f:e2:d7:
0f:be:cd:71:f9:65:3a:00:5b:dd:a2:df:e0:ed:f3:57:5a:6e:
40:d7:d0:1e:72:00:03:c2:04:b3:fe:ea:c2:6a:ab:3b:0d:0c:
90:54:8d:e0:69:83:f5:38:b9:4e:a4:84:b7:c7:32:a4:f5:c8:
b7:7e:01:da:5e:3c:a2:23:c7:92:f4:bc:40:2e:57:c0:95:cd:
24:d9:a9:97:7f:a0:a8:9a:bd:6c:e9:1f:94:98:48:38:53:57:
ed:46:63:3e:3c:4d:8e:a6:4a:fa:34:ab:80:aa:c9:fa:68:9b:
4d:22:b2:d1:ca:59:2c:07:d1:af:ee:2f:53:a1:e0:d4:ef:e2:
14:28:8c:7c:44:c7:22:6d:53:f8:1e:2b:34:b2:42:35:ae:52:
f1:46:f9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:19 2025 by rpki-client