Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a63a7eb4-172a-3b09-8cb1-3cf9396270e0.roa
File: a63a7eb4-172a-3b09-8cb1-3cf9396270e0.roa (raw, json)
Hash identifier: u2VFNuuzGtLTy1ue8EV9xJJPyvf1A3Gd1ochnBxJ3eg=
Subject key identifier: DF:D3:B4:DA:E1:99:9C:4F:92:73:68:C5:9A:F6:B5:AD:D1:00:89:47
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7F0A9E004EE9D1B1EB00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a63a7eb4-172a-3b09-8cb1-3cf9396270e0.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 192.101.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7f:0a:9e:00:4e:e9:d1:b1:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=5deaa908-a05b-430d-9630-e206f86ce7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:a2:0e:18:f2:0c:9c:2f:6f:61:61:db:12:
66:70:a3:ab:02:6d:4d:8e:72:10:a9:db:88:24:b0:
c0:70:ee:5e:9f:c1:23:b8:de:9c:60:22:1d:70:0f:
53:1c:b8:fa:d2:d6:f4:30:12:93:a3:2b:6a:6d:e5:
bc:19:59:b9:2b:78:52:97:9b:d8:1b:2e:ef:c0:b7:
98:eb:90:20:60:6e:2b:cf:05:8c:93:b5:49:ab:86:
61:f5:59:d5:c9:21:dd:a1:b8:78:9d:2f:79:4e:be:
74:4d:ac:08:89:d9:1c:d7:53:49:56:00:9c:71:08:
3d:a5:c1:1b:d4:3a:cf:e1:4e:ba:ed:88:0f:d5:4d:
cc:7b:2e:b7:40:ec:c5:2b:bc:a4:10:86:2c:b5:c0:
88:ec:44:11:1b:6f:35:6e:2a:24:07:b3:1d:f3:1d:
27:07:8c:c1:1d:57:0f:11:6e:39:39:13:ba:ec:1e:
e6:a3:5c:13:56:ca:96:d2:4f:ce:fa:46:dd:71:be:
8b:c3:35:0f:2b:aa:a9:a5:da:61:a2:ef:a8:50:86:
17:53:42:58:02:d5:c5:17:1f:4a:0b:6b:33:aa:63:
42:aa:24:7e:ae:93:91:9e:30:a4:91:2c:94:1e:4d:
b1:dc:14:41:d4:b6:64:8d:5f:50:81:ee:f9:b4:21:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D3:B4:DA:E1:99:9C:4F:92:73:68:C5:9A:F6:B5:AD:D1:00:89:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a63a7eb4-172a-3b09-8cb1-3cf9396270e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:19:02:43:7d:e6:02:a2:e6:7d:e1:0e:d2:7f:45:ba:3b:75:
2e:e2:7d:e9:90:74:84:6d:92:81:6c:60:5d:82:c6:b9:0c:a5:
cf:04:da:1d:6d:2d:26:b4:4a:c8:f9:c7:35:42:3a:38:b5:60:
41:59:a7:17:29:cb:da:ce:cb:33:66:fa:79:a1:29:41:3d:ab:
81:a5:44:8d:dd:f5:a7:e0:20:e7:5c:d9:74:f3:11:47:b2:a7:
20:31:aa:d7:3a:0a:ed:33:20:90:23:17:cf:83:d8:82:41:34:
6e:da:47:0c:27:ed:81:39:96:93:76:47:68:4a:bf:01:ed:e1:
2c:71:21:4d:ed:c5:25:a6:1e:00:86:b2:f1:da:aa:da:23:53:
38:6f:fe:d8:c4:2c:6a:14:cc:2e:3f:aa:e4:8c:7f:d6:54:ea:
10:50:b6:4d:ff:1e:78:80:0e:05:24:77:3e:3a:40:dc:14:1e:
04:38:a0:11:fb:0e:29:43:9d:29:3d:a1:75:b0:2f:d6:57:50:
b4:00:c6:7e:86:ea:81:bc:40:53:57:87:b0:3c:a8:d9:93:e6:
0b:45:7b:35:77:33:77:16:03:79:96:29:9f:48:1c:e3:ba:63:
12:91:3a:48:f7:46:23:bb:98:3a:5e:47:5f:69:80:01:9d:02:
9a:90:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:51:09 2025 by rpki-client