Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa
File: 039a554e-43ba-37e6-98d1-af4a718c60b8.roa (raw, json)
Hash identifier: IF0sVZOrghIDNJuHsIAzVkCXKFLmULTFPGk+87rJ5wA=
Subject key identifier: 47:C2:96:0B:2A:EE:36:EA:FB:27:32:48:91:A8:3D:F5:16:AC:22:F3
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F4328584913AC38B5CE1402894BEB98C0
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 22925
IP address blocks: 192.95.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:38:b5:ce:14:02:89:4b:eb:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=e73c8501-ce9e-447a-b8a7-3c6dba490bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:fa:90:0c:91:d0:e6:22:fe:39:67:ab:6c:
dc:80:dc:72:fd:6d:44:0c:ee:09:49:1f:a9:b9:4b:
74:ca:49:0a:31:73:4c:05:3a:b3:71:9d:c4:f9:52:
9b:d9:59:1d:fc:46:76:94:0d:dd:cb:05:00:2f:b2:
cc:56:80:93:b9:ba:4b:fb:a5:4f:14:2f:4d:0a:15:
a1:62:bf:43:65:16:8c:5c:f1:5b:bf:1f:a8:04:cb:
86:5d:29:f9:2c:3c:aa:c4:1e:27:6f:82:da:8a:56:
09:3c:a9:f1:9b:f3:80:bc:0b:98:a8:9f:a6:37:80:
c7:a5:ce:6a:07:ec:e4:e8:28:8b:3d:e8:77:8f:a9:
ee:5e:9c:a5:90:04:7b:06:cd:8b:25:cc:ec:6e:03:
bb:cc:f0:b3:27:dd:92:65:e2:1e:cb:d9:6b:7c:28:
86:fa:7a:02:8d:c8:c3:ed:db:73:0f:60:f9:7a:33:
f0:61:d3:e7:4c:09:80:f2:8b:5c:85:ad:21:4f:3e:
f6:ea:37:0b:19:d3:9a:af:d6:2d:d0:80:8c:89:e9:
f9:98:58:8a:c1:48:22:c3:eb:db:d0:25:93:19:b3:
0e:d6:2d:ba:e9:7c:c3:86:27:91:55:6a:c8:d5:d7:
4f:cc:4a:fa:20:60:6d:1f:d8:58:ea:84:da:fd:68:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C2:96:0B:2A:EE:36:EA:FB:27:32:48:91:A8:3D:F5:16:AC:22:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.95.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:37:10:87:aa:d0:9d:98:de:dd:73:69:05:59:74:ab:26:bb:
ca:60:75:bb:4b:42:44:a0:33:c6:37:bd:80:09:2c:cc:d9:01:
f0:cf:4b:3b:84:00:68:d3:cd:4c:a8:57:a3:bc:1b:72:52:8f:
8b:f7:38:41:5e:55:39:99:f1:1b:49:2b:dc:7e:39:c3:94:10:
85:14:ad:f8:58:fc:76:62:ca:8f:e8:85:97:c6:3c:18:06:0c:
55:fc:cd:59:ec:d2:7e:c2:78:b5:75:34:a5:7b:e5:be:62:1d:
61:5f:1a:cc:28:7c:f7:3a:e4:c7:03:d1:bc:f2:d6:cf:6d:6e:
a6:2b:32:12:72:e2:d2:10:5b:14:2c:dc:43:a1:9e:e2:6d:52:
42:90:28:87:44:d5:95:66:5f:13:c1:fa:10:a8:63:c1:ed:c6:
8b:d8:8b:26:af:09:e2:ec:0e:23:d9:12:92:14:1a:de:50:9e:
60:26:d6:42:de:0e:95:44:5b:66:c4:86:5c:e6:66:c1:61:75:
72:9b:fd:f8:df:2f:51:cb:85:e1:8a:28:f5:df:09:65:12:c5:
ab:84:cc:b5:ec:f7:e5:5b:79:f3:2f:32:bc:ac:1c:77:10:53:
e0:e2:a2:e2:aa:58:a5:63:32:45:08:4b:2b:66:be:e8:7b:be:
b2:03:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:46:05 2025 by rpki-client