Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa
File: 8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa (raw, json)
Hash identifier: 66pO0iBU/+LH4ZsWG3TEwPqji62+Qx+3Gaq9iujenYU=
Subject key identifier: 87:89:95:6F:DE:83:49:5D:0E:F6:E9:4A:85:0E:15:DB:EF:85:E8:D1
Certificate issuer: /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial: 010D0C9F43285848DAEEF297342CDD3EF9E3F280
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa
Signing time: Wed 12 Feb 2025 06:14:33 +0000
ROA not before: Wed 12 Feb 2025 06:14:33 +0000
ROA not after: Tue 13 May 2025 05:14:33 +0000
asID: 10996
IP address blocks: 192.154.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:ee:f2:97:34:2c:dd:3e:f9:e3:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Validity
Not Before: Feb 12 06:14:33 2025 GMT
Not After : May 13 05:14:33 2025 GMT
Subject: CN=433a2da9-fdec-4e8b-8c63-7c044ea9c28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:77:ea:7f:55:14:9b:d1:aa:3b:12:5b:2c:
e3:9a:16:44:b2:19:a3:f7:83:a8:95:3c:32:9d:b1:
e7:49:f8:eb:33:13:ac:d6:99:d7:03:35:7b:88:66:
8c:1d:2b:3e:d8:f8:ff:0f:90:9d:cc:b7:66:98:3b:
27:60:45:54:55:4a:c5:0c:ea:4f:51:a2:36:4a:c4:
50:f7:a5:33:05:ff:2f:19:5c:29:84:e8:a5:50:ec:
7c:bc:19:ef:6d:70:ee:d7:60:82:1a:ba:ff:08:8d:
ea:d3:95:79:b8:38:05:b8:69:97:fe:82:34:62:8f:
f3:40:23:7b:4c:c1:0b:c3:c3:00:e1:26:d7:97:62:
fa:58:67:40:a4:10:7d:dd:62:53:86:2c:db:be:30:
77:ec:19:0b:3f:da:66:a8:7e:cb:8f:03:d8:ec:8b:
d7:3e:99:d6:35:a5:ff:41:5b:96:c8:e3:ab:1c:da:
c9:3c:b1:b4:50:46:e7:73:71:3f:6e:f4:d7:b0:16:
bd:c0:ed:ed:8d:d2:bd:ea:11:8f:00:b4:30:09:de:
71:7c:a1:0c:19:3f:23:91:16:2f:50:64:3a:ed:54:
7f:b9:3d:e6:06:5e:0a:f1:b4:f7:e9:df:15:98:4c:
60:2f:0e:df:95:32:3f:05:06:31:5d:93:7d:98:49:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:95:6F:DE:83:49:5D:0E:F6:E9:4A:85:0E:15:DB:EF:85:E8:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
X509v3 Authority Key Identifier:
keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ca:18:f7:37:23:bd:90:d0:4f:bb:03:84:6c:40:5a:bc:d7:
6e:e8:74:53:25:5f:db:1b:6c:8e:a0:6e:b5:53:aa:5f:4f:d3:
df:21:71:3d:f2:c7:39:9b:2b:46:13:00:95:b9:e1:d3:89:6e:
98:eb:e0:56:12:f2:f8:5b:b9:42:1e:17:91:8c:a9:8f:39:bc:
1d:77:1f:67:e2:03:32:43:af:25:28:b0:a0:d3:73:51:37:6e:
c0:74:19:1a:c9:ef:1a:7a:85:79:eb:37:21:5a:1b:4a:67:fc:
7b:29:d5:b2:44:ec:85:86:26:62:28:9e:36:a0:55:21:d2:e3:
4f:b1:63:99:93:84:e5:9d:f1:f6:04:57:ee:b0:74:db:60:2a:
fe:35:28:58:dd:af:a2:d9:70:93:e0:4e:b3:11:b8:10:d1:25:
86:65:b5:b5:d2:99:b7:a5:48:f2:ef:2e:99:50:d1:b4:82:c9:
d9:48:a1:ea:97:1a:ee:d3:f1:b3:87:5e:fe:ec:1b:59:d8:fe:
47:f6:cb:5e:2d:e0:ca:f7:2c:a4:35:dc:45:2b:14:bd:e2:58:
04:1a:ab:f0:f3:1f:ce:19:b8:67:80:1c:57:b9:6d:65:69:22:
0c:94:a2:52:1f:cf:07:3a:44:a8:7d:f9:4d:2d:45:46:d5:97:
61:50:79:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:30 2025 by rpki-client