Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/1bea0700-2bfc-3937-9a52-46b59459456c.roa
File: 1bea0700-2bfc-3937-9a52-46b59459456c.roa (raw, json)
Hash identifier: O7z/JLhhrdEiwqTtpcYU4YhMIV71XdrA5qcYM5iB6KU=
Subject key identifier: D9:FE:5F:4C:EA:90:A0:07:9F:2F:CB:EF:03:38:60:30:AC:97:BA:03
Certificate issuer: /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial: 010D0C9F43285848A99627CFCC970B91BBD98C00
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/1bea0700-2bfc-3937-9a52-46b59459456c.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 192.103.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:27:cf:cc:97:0b:91:bb:d9:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=d28bbe0a-df5e-4a41-8c6b-4ce50dbb5036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:9f:c7:62:e9:b2:8e:00:8f:3a:d4:82:ec:
07:69:f3:ca:47:e7:50:a4:9a:f6:fc:a0:14:ae:36:
26:bd:0e:b9:a2:6f:7f:8c:82:27:0c:7e:9c:e2:13:
1a:8d:62:37:e1:a3:04:05:ec:7a:90:0e:71:b1:d6:
0f:e6:db:23:96:41:1b:8b:41:8c:7f:4f:00:6c:3d:
6d:63:b4:21:cc:58:de:73:98:5a:21:35:3b:c6:84:
c5:e7:7e:24:a0:bb:1f:d3:d4:84:17:66:99:e6:9f:
21:68:5f:70:82:5d:4f:3c:bf:bf:1f:e9:e5:5a:49:
cb:da:87:23:bf:35:8b:77:42:16:02:17:16:08:15:
2c:f2:dc:a0:01:e1:2f:6b:b7:37:ce:82:57:19:f3:
b1:60:34:34:a5:57:67:78:88:48:3c:ed:c8:18:71:
9c:7b:bc:aa:01:28:7c:bb:97:04:ae:13:51:f7:70:
1e:57:6d:ca:65:86:7d:4a:c1:bb:76:52:6e:68:ab:
73:39:3a:0d:ca:83:b1:06:d9:fc:6a:af:ce:30:ff:
db:1f:6b:45:e7:5a:17:30:52:1a:1e:3c:3c:ca:ec:
8c:3d:7a:6f:fa:3b:59:6d:37:4f:12:37:70:95:b0:
df:d5:68:f4:48:83:be:49:d7:0d:f8:ef:ae:35:4d:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FE:5F:4C:EA:90:A0:07:9F:2F:CB:EF:03:38:60:30:AC:97:BA:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/1bea0700-2bfc-3937-9a52-46b59459456c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
X509v3 Authority Key Identifier:
keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.103.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:0b:f6:d4:f2:a8:c0:21:fc:56:94:7f:84:30:93:86:ff:0e:
f4:df:d2:44:59:5b:fe:84:df:28:1c:2b:e6:e5:fc:53:9d:b6:
8f:94:ff:0b:21:20:48:5c:0a:d6:be:6d:fb:a2:6b:db:32:d2:
df:62:9e:d5:3d:b5:40:40:2d:af:8a:20:cf:1a:d3:d8:74:c3:
6a:fc:45:bd:24:a8:8c:cf:fb:bb:47:42:03:c1:49:e9:30:d1:
d4:28:a4:cb:09:a0:b5:bd:ea:fb:44:52:f4:52:68:d3:21:8d:
5f:0d:03:9d:91:36:0b:37:72:55:d1:9a:7b:82:e0:e7:7b:a9:
8f:d4:fc:47:af:6e:48:ac:d8:22:b0:ce:41:20:97:25:3a:ca:
f5:39:97:f1:00:76:6f:ce:d6:07:9b:e1:f1:5f:dd:21:35:67:
60:69:d9:3c:50:75:48:db:a0:58:12:65:f3:6e:b7:6a:30:33:
92:2a:f1:35:ed:09:ea:d8:a0:e3:ad:a9:e1:a9:ce:be:63:87:
6b:2b:87:4e:67:d0:c6:37:e5:d5:3a:57:82:42:57:b5:9d:b9:
21:fc:1d:d0:e2:99:d6:ac:cc:62:ae:6e:c0:06:ab:f2:bc:c2:
bc:6d:b7:65:81:9b:e9:22:b4:31:b4:77:bf:40:ec:a3:e1:8b:
7e:ac:22:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:05 2025 by rpki-client