Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/d12d7bae-b777-3fa1-a90f-0b2e7dc6f217.roa
File: d12d7bae-b777-3fa1-a90f-0b2e7dc6f217.roa (raw, json)
Hash identifier: yHxmTFxCzoh6SfsIz0PEAviQeQ40YbdOA1rHDjLCQ1o=
Subject key identifier: 80:78:D9:33:26:20:ED:C5:13:D2:EA:7B:C9:9A:17:BC:9C:EF:E6:C1
Certificate issuer: /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial: 010D0C9F43285848C2B64EDAF47B0CC4AA9E6C80
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/d12d7bae-b777-3fa1-a90f-0b2e7dc6f217.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 31898
IP address blocks: 192.243.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:4e:da:f4:7b:0c:c4:aa:9e:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=bdbc113f-545c-4eee-9296-2da903a2ca6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3a:dc:99:6d:a4:bf:e8:03:e2:78:0e:fd:48:
60:83:21:e2:b4:45:57:ea:b5:2b:dd:f3:ef:5e:59:
a3:79:1f:66:e0:dd:53:21:de:df:82:f8:42:4d:3f:
39:4c:9b:9b:07:c7:fb:d1:18:1b:10:b8:20:e2:62:
28:8d:68:f4:d1:48:e4:7f:69:0d:07:81:69:e3:48:
a4:48:4c:3b:ec:79:1e:dd:ec:94:ab:3d:3d:6c:cf:
f6:d7:f5:c0:16:91:cf:7e:0a:2f:0b:65:7a:8d:99:
06:0f:cc:26:ab:ab:0f:67:f3:c6:df:49:69:40:b4:
9c:b4:1e:02:cb:79:cd:49:4c:f0:b2:93:c4:21:66:
1e:c6:e4:54:aa:95:2c:00:e3:b7:5f:35:6e:46:e9:
0f:48:1d:e6:47:7d:79:4f:53:01:83:6e:69:78:f9:
20:16:d0:98:a4:79:d0:e5:74:7d:e2:14:a3:22:e7:
56:01:c2:ad:7d:00:6f:60:46:8e:f2:bc:fa:61:4f:
a8:be:a5:a1:9e:4d:da:07:ae:39:67:b8:eb:0f:ab:
50:b8:b4:90:83:f8:7b:bd:dc:09:68:a3:76:50:17:
5d:31:7b:4a:b9:15:d9:ff:3e:80:0f:e1:31:c1:75:
52:f2:54:9e:66:65:cf:b4:a4:36:1f:a4:c7:75:a9:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:78:D9:33:26:20:ED:C5:13:D2:EA:7B:C9:9A:17:BC:9C:EF:E6:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/d12d7bae-b777-3fa1-a90f-0b2e7dc6f217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
X509v3 Authority Key Identifier:
keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
sbgp-ipAddrBlock: critical
IPv4:
192.243.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:13:80:b3:40:8a:b9:63:a9:3b:27:46:7e:f2:dc:5b:76:5b:
d4:29:e4:3d:11:b4:0c:a7:6e:88:d5:b3:49:73:d8:8f:b4:c6:
0f:92:02:b8:68:63:8a:fd:0a:d4:55:0a:f2:8c:f1:40:69:83:
ec:38:06:5c:35:12:71:9f:80:25:ff:23:61:70:c2:48:6e:e3:
d2:32:17:de:1b:4d:3d:54:8c:6d:aa:43:b1:70:e6:89:d9:c3:
d2:d3:71:8c:95:86:6d:4b:c1:0b:46:f3:1a:92:bf:36:28:aa:
b2:15:c6:d1:11:29:44:6c:d6:75:e5:8d:e1:4c:e4:be:e4:17:
31:cc:c3:7c:ce:93:a8:07:67:ba:c9:7c:78:95:05:2d:37:9a:
55:fa:ea:31:ba:a7:e0:63:60:aa:96:26:d9:9b:b1:af:7a:09:
79:2a:90:18:4d:cb:08:d5:7e:cc:39:fd:ff:45:35:6a:91:fd:
70:d2:0f:e3:5f:e2:da:f9:6b:14:e7:78:9b:e6:5e:11:43:8e:
6c:26:1b:4e:67:29:87:73:50:fa:49:e6:91:71:c4:40:2b:90:
99:fd:15:ec:a2:d4:ff:6e:54:81:ed:cb:8c:d7:aa:7d:30:ef:
d4:8a:f6:f8:0b:79:3f:b7:eb:a5:d7:12:75:cd:b4:d6:09:53:
76:e3:d7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:57:20 2025 by rpki-client