Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa
File: f304bfed-6aa3-3d7a-a7df-324800baf33c.roa (raw, json)
Hash identifier: 0D/kVSuaOs1drTYaRyvWHvXk0WFQSKIo3uLmFTSRmV0=
Subject key identifier: 26:4D:FA:7C:6F:F3:41:2C:9D:F7:10:A5:43:FC:AB:57:9D:6D:29:50
Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Certificate serial: 010D0C9F432858494B63FFFA57FC407CEACAF800
Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 198949
IP address blocks: 192.200.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:63:ff:fa:57:fc:40:7c:ea:ca:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=d50a8e15-ce45-43ec-9df7-652ae87c2957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:62:d5:fe:c3:08:0f:d3:5f:6b:61:14:de:
ce:eb:87:6b:07:3e:67:7f:28:49:5e:dd:ab:d2:f1:
41:03:e4:03:59:88:08:f2:82:7e:f2:f9:a3:29:e3:
6c:fe:1a:e2:75:82:c7:71:2f:88:cb:95:c5:08:f6:
c3:08:7e:a6:11:b3:ae:9c:87:7e:c9:c7:95:0e:b8:
3b:9a:ed:b8:99:bd:b8:e2:84:f7:30:4c:ab:b8:a6:
40:ec:40:5b:20:37:e4:66:c0:bf:11:df:07:9e:32:
e3:07:8b:52:73:a4:43:d0:72:09:c1:83:f5:af:6c:
f3:d2:71:b4:9a:4a:6f:74:84:fa:20:13:b3:b6:82:
7f:fc:c3:84:e8:f6:f2:32:fe:f8:cc:c6:26:3d:2f:
d7:b7:18:ce:64:4d:c1:01:20:82:e4:87:97:3b:cc:
9c:0a:f7:23:6b:3c:71:67:a7:9f:64:a7:b4:77:06:
ea:cb:ba:b8:1f:d6:be:c7:cf:12:cb:01:2f:e1:15:
48:ce:d2:2e:21:13:15:dd:42:28:c4:04:8e:bc:5c:
56:7e:05:4d:bd:1b:66:f0:ad:a2:cf:38:e2:67:57:
b1:c8:dc:7c:aa:f4:1e:a9:55:9b:7d:f3:32:78:36:
ab:31:6c:4b:41:22:6a:37:4b:b7:d0:48:d9:74:99:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4D:FA:7C:6F:F3:41:2C:9D:F7:10:A5:43:FC:AB:57:9D:6D:29:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl
X509v3 Authority Key Identifier:
keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.200.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:d8:22:74:91:53:37:11:45:25:a7:3d:03:9c:9f:ee:01:45:
ee:ba:d6:20:db:6d:2a:ac:04:6b:48:82:23:09:e1:7a:0c:11:
72:39:73:f9:6d:ea:e6:b3:88:5f:58:c7:fc:e6:94:d7:0c:af:
53:da:6f:30:c1:7c:a8:8c:73:25:0c:29:fb:79:98:43:3b:64:
37:d3:fc:c1:06:7e:53:d0:96:64:dd:cb:43:72:d3:bb:46:75:
42:72:04:a7:43:96:fe:d2:1b:aa:25:99:b1:28:d3:d1:2d:2e:
36:65:fc:a4:bb:95:5d:17:0d:37:d0:31:47:57:fd:24:76:a1:
a9:da:62:76:90:b8:a0:62:d2:8f:b7:91:33:ee:b0:6e:3f:9c:
f6:64:f6:1c:8d:a4:2c:67:fc:80:84:c3:9e:8c:be:fe:4d:06:
78:5a:2e:10:1d:bc:db:4b:a6:45:1a:41:68:88:f3:ec:58:2c:
b0:3f:c9:bb:aa:7d:45:86:d2:fb:15:41:85:c9:b2:cc:8a:36:
25:a7:ae:1e:f0:b0:5f:45:13:77:ca:14:8f:2b:c3:f7:fb:85:
a9:ce:46:7c:22:bc:4d:f9:59:90:c9:bd:ee:62:02:2c:ae:1b:
e8:49:22:9f:3d:b1:a6:0b:4b:25:60:0f:21:2c:e7:0e:da:43:
27:da:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:38:56 2025 by rpki-client