Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/74e1c62c-1bf4-3f8e-90a3-1476ccea57ba.roa
File: 74e1c62c-1bf4-3f8e-90a3-1476ccea57ba.roa (raw, json)
Hash identifier: VKfw0xgacnjbgkRjApFDKfFko5qLnwyf/c4sU6H2Jik=
Subject key identifier: 44:07:D9:15:7A:35:85:68:2F:10:38:26:30:02:10:C7:36:12:7C:14
Certificate issuer: /CN=93e43339-37a5-4091-b560-67e3fca1a9fa
Certificate serial: 010D0C9F432858491511583DCEB02C15D4681520
Authority key identifier: 22:7D:8E:EC:B9:0A:FB:3C:CA:D0:B1:0D:9A:C9:B0:15:6E:A9:23:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/74e1c62c-1bf4-3f8e-90a3-1476ccea57ba.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 27277
IP address blocks: 192.31.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:58:3d:ce:b0:2c:15:d4:68:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e43339-37a5-4091-b560-67e3fca1a9fa
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=0b0fd1e6-0d6c-46f4-8159-9f2c4edc3c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:2e:26:53:13:3e:4a:5c:24:c2:49:67:0b:
fe:b6:b7:4d:a1:e6:4b:64:0c:e9:56:4c:cb:fc:3c:
ae:77:94:79:7c:e4:e0:67:82:ef:84:6e:96:c2:94:
78:ab:5a:8d:f0:34:2c:60:e0:d6:47:40:43:9f:16:
bb:cd:b8:e5:98:9a:89:70:d2:f6:7e:f1:88:2e:c6:
bb:a0:68:7a:d8:57:16:cf:0c:44:3e:48:ca:cd:9f:
ff:07:6b:c8:44:f7:a8:d5:eb:fa:b9:8b:34:27:41:
91:4b:b7:59:0b:8c:10:cf:60:37:f6:2a:5a:a5:f2:
4a:52:29:3a:3c:4e:ca:11:aa:21:30:e5:4b:6e:66:
26:5d:83:0f:1e:3e:e0:eb:2f:8e:37:97:73:ee:08:
4a:ff:4c:13:33:bd:1b:66:b0:2d:46:cc:06:4f:d7:
7c:9f:93:c3:b6:ab:dc:f7:4d:d0:7f:82:d3:93:16:
54:bb:ef:a6:ba:ba:8e:a8:8f:1c:41:5c:7e:53:f1:
66:47:7b:bf:65:4f:2a:2a:76:76:d4:2a:62:42:ad:
06:af:e4:a5:a5:2e:0a:90:40:b8:eb:f9:df:91:3b:
49:c5:b6:34:31:04:43:21:20:68:b6:3e:0c:59:8e:
e3:b3:60:25:9d:66:1a:7c:61:1e:a4:74:aa:2b:8e:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:D9:15:7A:35:85:68:2F:10:38:26:30:02:10:C7:36:12:7C:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/74e1c62c-1bf4-3f8e-90a3-1476ccea57ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.crl
X509v3 Authority Key Identifier:
keyid:22:7D:8E:EC:B9:0A:FB:3C:CA:D0:B1:0D:9A:C9:B0:15:6E:A9:23:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer
sbgp-ipAddrBlock: critical
IPv4:
192.31.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:dc:7c:4c:85:2a:64:91:05:2d:50:af:7c:d4:af:cf:d1:d1:
f1:c3:8f:2a:82:23:2d:32:8d:fb:b7:ca:88:21:96:35:bc:e2:
53:b2:cd:01:c6:e1:ea:20:80:74:ab:c0:82:0d:ae:55:0e:ad:
af:80:1e:dc:36:59:1d:41:26:c4:0f:36:67:2c:d7:67:85:fd:
87:aa:ef:d3:35:b4:ba:34:cf:19:9d:10:68:a3:59:0b:50:6c:
72:e2:cc:ca:26:2d:32:0b:f2:a7:d6:13:ee:c6:b4:eb:9b:77:
d6:45:14:13:e0:69:b0:4a:62:60:cf:b8:be:c3:da:36:89:e1:
0e:23:f0:a7:16:62:f1:59:62:a1:30:ad:9a:5c:b1:8b:92:4b:
f4:db:c1:c4:78:65:f2:1f:9d:96:d3:6f:d9:ff:92:44:f1:6b:
84:60:4f:0e:8c:01:c5:3d:b1:e9:aa:b4:db:12:0d:8d:09:61:
d7:2e:7c:20:a5:e3:09:58:ca:61:dd:35:86:18:9b:8d:dd:12:
1c:0b:6c:7e:ed:eb:1b:3b:11:40:1e:20:31:57:65:ef:17:ef:
ec:24:2a:9a:d5:1b:93:a1:53:1c:df:de:6d:6c:c1:87:fa:f3:
7b:e7:ad:fe:6b:cf:7a:97:91:32:c2:27:ec:7d:cf:cf:17:28:
6b:88:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:02 2025 by rpki-client