Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
File: fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa (raw, json)
Hash identifier: 1vzHnWMaW3lwDhp8OalgN6Eb4P9WQ+ro7LeaqqUhvtU=
Subject key identifier: 16:A7:1B:98:41:C5:D4:C5:35:D6:F2:E4:07:61:EB:12:83:3A:24:08
Certificate issuer: /CN=800a3455-ccc0-4a37-976d-54fe22d7fb52
Certificate serial: 010D0C9F43285848F22C718062C51B2911A06C80
Authority key identifier: 02:B5:A0:07:CB:1D:46:8B:9C:A1:4F:82:F8:F7:66:8F:5D:33:4A:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 33137
IP address blocks: 192.189.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:71:80:62:c5:1b:29:11:a0:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800a3455-ccc0-4a37-976d-54fe22d7fb52
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=85a74c56-739a-4303-a85f-b7a23933bf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:ad:4a:93:b1:a4:35:35:50:35:b8:b5:5f:
f3:e5:24:f3:05:95:c2:cd:44:ee:14:f1:38:03:ee:
85:1e:b1:51:96:a5:67:56:7b:e9:05:e7:f8:f6:ec:
c9:65:88:5c:7d:36:52:64:29:d3:0f:65:1b:5d:7a:
89:49:70:27:54:89:51:e1:0b:8c:fa:90:46:d3:4d:
ad:f0:55:6d:7b:64:8e:3a:8d:24:b0:a1:fe:8d:d5:
20:a8:53:a2:99:51:ee:ca:b3:41:e0:4c:46:90:91:
cb:9e:9b:7d:3c:d4:1f:5e:19:9f:43:bb:4c:e7:43:
f2:45:b8:71:c9:f1:17:12:0f:08:9a:f9:0d:75:f0:
56:84:12:41:ae:6e:cc:0b:a7:83:dc:df:7c:9d:dc:
0f:de:e1:d2:1f:2d:b8:2f:67:05:04:3e:d9:71:3f:
41:66:c2:e0:2d:a3:ae:08:d8:ef:fe:08:ac:1d:d0:
3f:08:a5:e2:bc:34:57:1e:48:7f:5d:cd:10:dc:77:
8b:58:b9:4c:53:a5:3e:d2:ab:27:af:29:bf:b7:59:
eb:3b:5e:b4:21:83:5f:a1:88:62:9e:b5:bc:88:ef:
6e:f8:f9:bc:ba:ef:07:91:c2:9d:e3:0b:71:d9:4d:
df:d8:12:82:6f:4c:35:9e:6f:98:5a:c3:7c:1e:ff:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:1B:98:41:C5:D4:C5:35:D6:F2:E4:07:61:EB:12:83:3A:24:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/800a3455-ccc0-4a37-976d-54fe22d7fb52.crl
X509v3 Authority Key Identifier:
keyid:02:B5:A0:07:CB:1D:46:8B:9C:A1:4F:82:F8:F7:66:8F:5D:33:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:4c:41:c2:32:91:2d:00:e7:18:34:72:1d:84:55:be:05:09:
4d:84:be:75:9b:f4:12:1a:41:91:9b:d7:75:6c:b1:3c:da:5f:
dc:4b:cb:a5:23:05:2b:f4:92:62:a6:5e:d3:d0:3c:4b:4b:fe:
fc:61:02:bf:f0:82:8f:0f:c0:76:f9:d0:ea:ca:88:41:95:e5:
00:16:90:8b:6c:4d:b3:67:81:fc:72:9c:ea:9b:8a:3e:16:63:
71:bf:a7:b9:52:31:b8:3f:f5:50:1b:c0:8e:0f:c6:fb:88:8e:
31:0e:21:a1:fe:1a:08:d9:ee:68:61:85:c4:8e:7d:f2:40:57:
44:f9:2b:28:2a:8e:a6:cb:9f:09:34:d1:ae:46:31:cd:c2:83:
d8:18:e9:9c:58:7a:2b:8e:26:b1:fc:97:83:ee:8e:d3:54:ea:
7b:20:b7:35:95:ea:f5:87:04:bf:e3:19:cb:ad:ec:7a:a5:fb:
e0:a4:c0:68:40:d4:eb:be:de:e1:8d:c2:21:0c:c0:72:0b:17:
6b:44:11:27:e2:88:67:8a:ac:aa:f1:2c:27:95:30:ca:cd:18:
50:a8:a5:31:d3:72:68:95:10:d9:90:40:6f:6c:12:de:ec:2e:
2d:1d:fa:6b:38:dd:7f:b1:51:bb:90:7b:53:0c:8f:9f:a7:db:
83:1a:37:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:55 2025 by rpki-client