Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
File: 955a609a-42f8-316d-a938-27d1ede991ad.roa (raw, json)
Hash identifier: QHQM0OPGnZj5lYVXsaX1TZaGci6OLTz306Po+8TZY9s=
Subject key identifier: EF:4D:D2:E4:4F:DB:1F:42:BE:AF:A7:CE:EE:41:78:B6:62:E7:BF:2B
Certificate issuer: /CN=4b0cf977-e8ab-492d-bd1d-e7b11385e631
Certificate serial: 010D0C9F43285848C2B64E18E83CABF251ED7F80
Authority key identifier: 31:2D:BC:40:C8:98:37:68:4D:D7:DF:28:3F:A8:DC:28:EA:73:99:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 3477
IP address blocks: 192.94.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:4e:18:e8:3c:ab:f2:51:ed:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0cf977-e8ab-492d-bd1d-e7b11385e631
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=3206e904-c8d2-483b-87f9-755c8e5daa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c8:7c:ba:09:d3:b3:ad:b3:6c:f3:62:e3:e5:
2d:24:ac:8c:bf:0f:5d:19:26:f5:b1:6d:f3:a5:6f:
1b:bb:29:ef:70:8e:61:d7:23:2a:ab:b7:bc:f3:52:
2e:7b:6c:56:e4:31:fb:56:e7:60:97:ec:54:1a:c7:
dd:c5:2e:67:9d:f9:88:19:7b:f4:a8:9c:f8:41:9c:
cf:5b:d8:67:08:d1:86:10:04:d9:30:7a:78:9d:ac:
7a:37:07:bf:1a:d4:6d:43:b8:e3:81:d8:66:a6:65:
28:73:8f:11:bb:98:d6:66:02:a7:4d:e8:50:d0:92:
d9:c0:30:6c:ab:64:3a:2d:86:6e:80:4a:c2:5b:fb:
d7:12:96:34:8f:62:91:0f:f4:60:66:4b:07:2b:65:
1e:51:a3:8a:02:be:aa:8d:1d:db:12:e8:84:55:cd:
7b:a2:9d:47:96:e0:a3:13:e6:b3:1d:82:14:f8:f4:
4b:e4:7b:0e:a7:41:30:94:16:d4:8d:85:0d:69:ba:
38:5a:93:68:77:ea:e6:c3:e4:f9:bc:8c:68:58:f5:
33:85:ee:91:d3:ec:05:09:82:2d:07:14:63:15:ca:
4d:12:c2:f8:00:d9:18:77:d4:bc:74:c3:6c:de:78:
4f:71:c5:f0:60:ea:aa:78:9c:41:06:78:e7:27:62:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4D:D2:E4:4F:DB:1F:42:BE:AF:A7:CE:EE:41:78:B6:62:E7:BF:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.crl
X509v3 Authority Key Identifier:
keyid:31:2D:BC:40:C8:98:37:68:4D:D7:DF:28:3F:A8:DC:28:EA:73:99:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer
sbgp-ipAddrBlock: critical
IPv4:
192.94.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:67:b1:28:7d:24:da:32:4a:5e:52:97:2b:ce:de:07:ee:a5:
49:bb:4a:fc:eb:14:43:31:1c:08:3f:d2:1e:4c:e7:4b:93:42:
ef:54:21:70:86:18:07:c9:f1:df:c8:c4:5a:88:e4:a6:9d:b0:
b2:86:e7:86:fb:93:4b:9b:3b:2e:8f:ae:fa:59:fc:63:d9:23:
14:81:f1:97:96:62:08:3b:76:c9:90:65:95:dc:1f:c1:88:3e:
f7:64:89:33:34:fd:bb:84:e5:19:24:e8:a3:7a:3c:be:f2:cc:
6a:c4:db:1a:55:1d:21:26:98:7a:8d:b4:19:8a:e3:81:a1:c1:
a0:dd:bb:88:2d:aa:89:76:85:56:d4:d6:95:5a:ae:bc:b8:9c:
01:c4:b6:9b:69:fd:b9:3b:ab:32:a6:d1:77:e1:c1:b4:e3:c2:
5a:67:2c:04:2c:dd:b1:e2:47:9f:8b:19:3b:99:8b:9a:bc:8a:
0b:74:0e:2d:c2:26:31:a3:6d:f2:58:af:01:a3:c2:34:75:e7:
5d:f8:5e:a9:e4:f2:32:c6:04:8a:c3:d0:fd:3c:4c:fb:f6:17:
31:6a:90:7c:33:0b:0c:92:46:c0:a8:52:68:e3:ee:f4:46:ab:
6a:02:3c:b1:f9:c9:50:d4:1a:41:a6:49:41:36:cc:4b:26:9f:
a6:c0:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:39 2025 by rpki-client