Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/3430934f-1559-3834-9666-ebb72d355783.roa
File: 3430934f-1559-3834-9666-ebb72d355783.roa (raw, json)
Hash identifier: h4SvjOvINdhgfskKAKhT8c7XPgewPlNwEtLfhcA8RY0=
Subject key identifier: FB:CF:73:2E:77:42:E1:75:D7:23:22:E3:50:8F:AD:08:E9:23:C4:DB
Certificate issuer: /CN=269e6e83-2a0d-4c81-ac1b-0611cf797293
Certificate serial: 010D0C9F43285848AAFB57D7D798574B7845D400
Authority key identifier: C3:91:15:34:64:14:83:9D:A3:33:21:38:C7:32:A0:D1:0F:C8:AE:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/3430934f-1559-3834-9666-ebb72d355783.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 40149
IP address blocks: 192.107.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:57:d7:d7:98:57:4b:78:45:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269e6e83-2a0d-4c81-ac1b-0611cf797293
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=a48246e3-3054-43e2-a79b-21dd2f83fa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:87:de:d0:f0:3e:d1:97:b6:3e:8b:1f:e1:
d5:b8:66:56:60:a0:0b:0b:67:9f:2b:b4:3a:85:d7:
ce:7d:f0:1a:84:87:c9:f7:fb:16:04:29:ce:5f:6e:
3e:0a:65:39:96:22:8f:09:d7:d8:2f:db:09:7c:68:
01:1c:45:a2:ee:c6:0b:06:e0:dd:31:b9:3f:05:f1:
70:b8:cc:8c:b8:46:3c:63:88:fb:54:b5:4f:dd:d5:
8a:fa:67:b9:6f:53:0a:11:d9:6e:38:d1:53:49:66:
0d:c1:f7:a7:4e:0c:55:ed:11:00:d3:01:8f:ad:ff:
e1:98:27:f1:d7:f7:23:c7:c8:fb:86:d6:fb:81:bd:
4f:ec:73:36:85:a7:70:68:f3:54:04:8d:d5:ce:37:
cd:ca:cc:a0:42:b8:a4:68:e0:ce:d0:66:d1:27:86:
1f:34:41:15:0c:ef:a3:ec:86:57:aa:63:8f:9e:d7:
db:14:4f:4c:13:bc:13:1c:2e:a5:11:cc:e4:d0:a4:
66:0a:18:3b:96:9b:a8:5c:49:83:27:ea:57:6e:64:
ef:cd:62:b6:d5:37:b8:24:ed:c2:c5:0d:50:b9:ea:
2d:11:5b:1a:79:18:4c:0f:6e:ed:6c:77:a7:7c:30:
6f:b2:c3:3a:96:a5:69:35:39:2f:c0:0f:34:6d:9a:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:73:2E:77:42:E1:75:D7:23:22:E3:50:8F:AD:08:E9:23:C4:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/3430934f-1559-3834-9666-ebb72d355783.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/269e6e83-2a0d-4c81-ac1b-0611cf797293.crl
X509v3 Authority Key Identifier:
keyid:C3:91:15:34:64:14:83:9D:A3:33:21:38:C7:32:A0:D1:0F:C8:AE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer
sbgp-ipAddrBlock: critical
IPv4:
192.107.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:81:30:f0:1e:38:3c:a3:2e:d8:d6:d6:11:01:0c:26:4a:84:
06:09:61:21:d0:a3:14:f7:01:d8:0b:a6:e7:74:a7:d2:fb:60:
97:b8:8a:6e:08:52:d3:12:e1:07:f4:02:6a:d2:ea:cf:dd:84:
67:7a:1c:a9:c4:d3:92:97:3e:25:7b:d7:1b:43:37:d4:0b:4a:
4a:66:cd:94:62:06:b8:2b:38:cd:cc:fa:04:46:14:e6:54:6b:
39:90:dc:4a:b5:7c:ee:a0:7c:3a:b1:c1:cd:e0:ae:20:ee:08:
37:13:00:8c:f5:d0:7b:7d:a5:1c:0f:50:55:ab:89:2a:a7:24:
2c:98:f6:c0:f0:26:e6:5a:61:bd:85:44:6b:1c:08:e2:9c:6f:
89:d6:47:87:de:e6:5f:87:83:0b:36:6e:9d:b9:e7:27:30:03:
44:92:f4:60:f9:ff:1d:bb:03:4d:b0:b9:8b:73:c5:63:48:56:
95:15:7f:eb:52:e0:b6:85:07:64:5d:60:12:98:e6:d4:e2:15:
14:b0:bf:4a:f8:b1:b6:5e:92:31:e7:a0:2b:61:be:af:b8:a0:
aa:dc:fb:02:d9:b7:3e:61:43:3e:1c:41:68:52:34:72:aa:f9:
a4:3e:72:17:99:90:4a:ca:5b:92:ab:d6:fe:bc:13:1b:e4:d8:
ff:55:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:48:26 2025 by rpki-client