Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12574ab4-368a-4b8e-bb87-b7f387a22410/c171fe60-a438-3da0-a18b-bea3134ddec4.roa
File: c171fe60-a438-3da0-a18b-bea3134ddec4.roa (raw, json)
Hash identifier: 1mIRrflmH+EtJB6nIoYcz3RZ6+ed5nXcEoeDhBFdAh8=
Subject key identifier: FA:AE:51:D8:39:15:7A:E2:55:3A:A1:AC:47:F0:26:10:A7:A6:7B:F9
Certificate issuer: /CN=12574ab4-368a-4b8e-bb87-b7f387a22410
Certificate serial: 010D0C9F4328584888D264025EAEF4B4DFEE1F00
Authority key identifier: 12:D5:0C:47:FB:9E:DD:D6:F9:45:D4:93:5E:AD:41:33:FD:5D:4F:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12574ab4-368a-4b8e-bb87-b7f387a22410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12574ab4-368a-4b8e-bb87-b7f387a22410/c171fe60-a438-3da0-a18b-bea3134ddec4.roa
Signing time: Mon 13 Jan 2025 20:20:44 +0000
ROA not before: Mon 13 Jan 2025 20:20:44 +0000
ROA not after: Sun 13 Apr 2025 19:20:44 +0000
asID: 401456
IP address blocks: 192.107.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:d2:64:02:5e:ae:f4:b4:df:ee:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12574ab4-368a-4b8e-bb87-b7f387a22410
Validity
Not Before: Jan 13 20:20:44 2025 GMT
Not After : Apr 13 19:20:44 2025 GMT
Subject: CN=e7656853-96e5-4f43-87d3-cf59f1165e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:f2:51:89:02:23:22:70:4a:fa:a8:88:9c:
45:14:26:18:b3:2c:22:31:19:7a:dc:00:63:a7:e2:
96:00:81:7f:3a:80:d5:47:5e:1b:29:e6:6b:2e:7f:
f3:01:aa:12:a4:1f:2a:c1:bf:8f:ba:ca:fd:16:c7:
a6:f7:0f:f2:46:54:14:23:a9:11:1d:14:9d:7a:0b:
ae:09:d5:57:49:57:85:5c:f4:52:f4:e3:a7:81:e1:
d1:6b:44:03:93:55:4c:14:82:e5:d1:71:ac:a6:8f:
62:a4:41:8e:65:32:4c:72:21:0f:44:a8:bd:74:83:
8b:6c:c4:ab:f8:ff:54:b7:c4:21:34:01:b4:35:d9:
cf:90:2f:0b:e2:33:f5:ed:df:02:ea:83:ae:99:d5:
61:8f:9c:be:ce:47:60:4d:07:81:41:93:44:3b:b7:
ce:6f:4e:7d:78:21:8a:7d:88:b3:de:33:a0:fd:30:
bf:61:5a:a1:61:a4:b8:93:b9:1d:31:c2:c6:92:80:
a8:0a:8f:3a:ad:45:b5:bc:7a:73:2c:c4:e4:e0:dd:
51:54:29:f7:c7:93:95:9b:a2:93:13:eb:7c:39:6a:
31:84:de:b0:fe:2b:92:fb:5d:81:b6:c4:99:8a:13:
41:32:1c:7e:86:fa:03:2d:21:98:05:d3:fc:d9:50:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:51:D8:39:15:7A:E2:55:3A:A1:AC:47:F0:26:10:A7:A6:7B:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12574ab4-368a-4b8e-bb87-b7f387a22410/c171fe60-a438-3da0-a18b-bea3134ddec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12574ab4-368a-4b8e-bb87-b7f387a22410/12574ab4-368a-4b8e-bb87-b7f387a22410.crl
X509v3 Authority Key Identifier:
keyid:12:D5:0C:47:FB:9E:DD:D6:F9:45:D4:93:5E:AD:41:33:FD:5D:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12574ab4-368a-4b8e-bb87-b7f387a22410.cer
sbgp-ipAddrBlock: critical
IPv4:
192.107.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:6b:df:05:52:b4:72:ec:0d:e4:d3:f1:c3:60:da:6d:07:54:
62:66:60:15:0d:91:fe:91:d6:44:76:82:de:9d:c7:e4:64:84:
53:98:04:6d:62:f4:d2:22:53:d7:ae:b2:7e:87:5d:33:1b:46:
92:ba:38:c8:ec:5a:43:fc:f6:c0:b3:d7:62:7b:f5:a4:ce:83:
a6:aa:af:73:b4:da:ac:9e:76:1d:88:4d:68:e8:10:8d:6e:d3:
10:00:24:6f:c0:48:af:8e:5d:63:3c:b5:c4:b9:40:66:a4:48:
d6:7a:22:a2:45:12:94:3f:f5:77:91:d0:09:75:1f:c7:c5:3a:
0e:ea:ef:13:cc:4f:7b:16:c0:f0:1b:0b:1d:3a:65:28:83:06:
d2:01:6f:d2:81:aa:70:bc:5b:03:27:f9:2b:1d:ff:51:a3:e3:
95:d5:22:a5:55:0a:4c:c3:f6:3e:61:8c:3b:90:a8:bd:d6:cb:
39:a8:b6:b7:18:32:c8:34:f3:3b:2f:76:18:db:62:90:3e:42:
ec:48:e5:af:83:51:7c:da:46:fa:54:cf:99:cf:c0:18:42:35:
3d:20:2d:df:ff:fc:1a:68:a2:95:7f:35:81:3f:e3:da:aa:e5:
ca:07:4e:03:57:e6:5f:51:05:2f:53:2c:47:d4:62:e2:27:bb:
db:9e:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:15 2025 by rpki-client