Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa
File: abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa (raw, json)
Hash identifier: lVdk3e29ghQh6ATFkzNb6h666nCdRkHlZMWzangBFcU=
Subject key identifier: 76:FF:EC:2C:C5:2A:42:C1:7E:AC:CF:05:B6:7D:98:AD:3C:4D:04:CF
Certificate issuer: /CN=332b909c-500c-4711-b8f9-90f766d6a38a
Certificate serial: 010D0C9F43285849552957D913CD4A6480B55100
Authority key identifier: BD:B5:65:B7:80:5A:6F:F5:16:42:37:DC:18:84:3A:F3:AA:AB:96:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 63306
IP address blocks: 192.40.216.0/24 maxlen: 24
192.104.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:57:d9:13:cd:4a:64:80:b5:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332b909c-500c-4711-b8f9-90f766d6a38a
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=1dca86a3-2ac8-4b1a-b674-246baf9e85fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b0:08:85:43:15:4c:b5:e8:14:ab:e9:ee:3c:
46:55:91:fc:b5:83:bf:c7:99:69:f2:38:8d:18:9a:
8f:91:64:20:b1:e4:6d:74:e4:06:ab:a6:b1:c7:95:
2b:3e:32:25:a4:e6:e6:3c:e9:d1:e0:1d:2c:c9:e8:
28:9b:fc:38:28:24:58:1c:86:6a:07:f1:ce:4f:73:
5c:32:cf:ba:37:e8:a7:c6:5a:83:5c:31:56:f3:39:
01:5e:ec:32:83:4f:eb:4c:88:77:af:f8:5b:63:53:
15:df:39:31:5a:21:4e:23:6b:7d:4a:ed:8a:66:90:
c2:1f:9e:4b:39:18:3f:a8:7d:0d:a4:64:b7:1c:b7:
f0:f3:09:03:40:1f:f7:53:e8:e1:a6:4f:b4:43:13:
c8:83:68:48:73:fa:e7:0f:c4:bd:8d:8f:45:de:32:
74:09:b0:ab:e8:6a:20:f5:37:c1:4d:4f:3c:d6:ae:
19:04:57:50:15:1c:9a:ce:4e:97:35:fb:4e:3f:7c:
aa:24:ef:99:6f:05:f1:0f:1f:85:77:82:70:af:3e:
76:86:07:f8:c4:91:a9:05:3f:d1:38:aa:49:6a:47:
c0:13:33:25:80:e4:cc:b1:60:9b:d8:77:cf:33:96:
0c:17:bf:b6:4e:2e:6f:21:5c:a6:6c:90:b0:fe:8b:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:EC:2C:C5:2A:42:C1:7E:AC:CF:05:B6:7D:98:AD:3C:4D:04:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/332b909c-500c-4711-b8f9-90f766d6a38a.crl
X509v3 Authority Key Identifier:
keyid:BD:B5:65:B7:80:5A:6F:F5:16:42:37:DC:18:84:3A:F3:AA:AB:96:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.40.216.0/24
192.104.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:46:1b:ba:c8:47:a1:42:f1:8d:2c:d8:94:7b:d2:f9:15:fa:
df:eb:f5:f7:2e:93:fd:a9:64:e1:3c:30:9f:69:f9:70:02:43:
15:76:a8:21:ab:77:7d:a4:46:5b:40:9a:4e:92:fb:29:d6:bd:
35:40:dd:a2:4a:84:b8:1b:5f:83:10:dd:6e:f4:60:9e:36:0e:
c7:63:50:a1:75:a2:c1:ab:91:cb:5f:cb:01:19:1d:51:39:48:
af:8a:68:35:33:4f:d7:25:8c:81:cc:bb:b0:ff:74:a7:f8:24:
cd:58:82:c0:fc:79:ab:52:4f:f3:8e:fb:ab:fd:83:53:86:56:
a2:9e:df:3d:bc:73:5c:18:28:8c:09:e1:6d:0e:7b:89:b3:a3:
41:11:41:63:9f:c7:6e:ed:c5:f0:84:ba:21:74:9c:89:a5:e8:
f1:0c:4f:49:76:1c:2b:ef:75:32:a5:60:8f:66:35:18:20:e6:
de:ca:78:4c:71:ec:3d:d2:c8:ef:7a:a2:68:27:f9:59:78:22:
df:da:1a:3c:37:8f:d3:d9:4d:a1:20:23:e2:57:31:c5:bb:26:
a8:b9:2f:f9:81:8d:b4:a0:9d:7b:29:d4:57:6b:07:d0:5c:a0:
87:61:59:0f:75:fe:a3:a8:9c:78:53:a8:db:8d:1a:7a:86:55:
49:4a:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:12 2025 by rpki-client