Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa
File: 9ce597f6-b093-3c3d-b115-eebeaf02c756.roa (raw, json)
Hash identifier: fkDQg8TCOPKFf0zVCw8ypLMsSxE4bVtADpkwGeSQDRs=
Subject key identifier: A0:6C:18:58:4B:26:AD:F3:F5:4D:FC:6D:A6:43:9B:F2:E4:A1:DE:ED
Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Certificate serial: 010D0C9F432858493C093D335D7E90A846AA4A40
Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 59
IP address blocks: 192.12.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:3d:33:5d:7e:90:a8:46:aa:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=b519c552-ead5-46f2-8f02-8e08e157a061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:98:3e:ec:0c:2c:27:ee:b8:9b:61:dd:d0:
0b:11:26:30:70:d2:bd:b2:50:ba:ea:03:73:8f:5f:
4b:ee:e7:2a:4c:ae:b9:15:7f:d3:8f:55:fa:c4:6a:
49:2a:bd:33:cc:5d:31:7e:33:16:84:0d:c4:24:96:
77:0d:6d:bb:5d:45:ac:49:29:f9:3e:06:d9:be:60:
2e:9e:a4:90:00:88:3f:8c:e3:aa:98:01:91:03:b6:
d1:2c:f6:40:a3:2e:fa:7c:54:4f:55:e1:09:f2:3a:
e4:19:57:d1:c6:69:19:4a:b5:64:89:ed:6e:59:73:
94:16:fd:5d:b4:6a:ea:96:53:a0:73:33:bc:78:60:
75:cb:be:e9:5c:4b:45:c9:30:54:1e:72:10:2c:5c:
51:a0:69:c1:a0:18:42:5e:9b:11:1f:87:87:6e:12:
56:c8:57:7e:ff:49:3c:3a:ef:67:c9:a7:d7:28:4e:
ca:c7:a2:99:d3:48:6f:2b:dd:02:70:30:8e:0d:b2:
f6:d3:c0:d3:cd:5e:18:57:9b:ce:58:3e:af:ee:31:
74:f2:9a:3a:11:6a:22:3b:55:bb:2c:2e:dd:dd:d9:
6f:a5:44:c0:6f:2e:ee:28:12:64:c4:35:93:85:ec:
1b:c0:67:0c:87:81:6d:c6:23:81:25:06:e1:4c:02:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:18:58:4B:26:AD:F3:F5:4D:FC:6D:A6:43:9B:F2:E4:A1:DE:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl
X509v3 Authority Key Identifier:
keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:66:26:64:9d:75:cc:ee:ef:f2:46:12:28:94:cf:08:25:49:
02:dd:21:17:29:94:9f:fa:cf:78:bc:3a:a5:59:b4:04:4a:10:
5a:a0:67:ef:a9:ce:1d:b3:2d:ee:f9:0f:5f:01:78:9b:39:1b:
c1:f2:77:af:87:ed:86:4b:91:07:6d:46:65:2a:72:41:60:e8:
8f:2c:a7:11:37:06:4d:38:38:47:e4:58:57:b2:f6:a8:ab:a1:
81:d9:04:5d:e7:40:33:7a:0d:7d:31:8c:f0:7b:57:44:29:35:
85:2b:2a:9e:aa:49:d4:c2:ea:03:30:5b:be:98:d5:fc:0f:70:
02:23:96:ba:bf:0e:db:9c:7f:88:28:1e:85:de:c0:5e:72:78:
4b:5f:5e:93:2d:76:59:27:c7:45:2e:b1:69:a9:d6:39:6a:2e:
0b:d5:82:c6:94:be:06:f4:12:46:1e:bf:6b:ad:a0:41:75:08:
6d:22:e2:52:8f:a1:63:0f:b1:9c:45:35:6f:23:2f:1d:f2:b3:
41:c2:e8:0a:77:77:9d:00:bf:e8:f3:48:05:bd:cd:7f:c5:7e:
6a:cb:71:ea:f0:76:55:d3:fd:25:39:23:70:3d:ba:b0:13:b5:
f3:59:52:86:69:e3:6c:0a:3c:42:f8:57:73:64:28:59:40:18:
f9:80:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:00 2025 by rpki-client