Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/860f9ef3-7893-3281-bde7-c793829fceca.roa
File: 860f9ef3-7893-3281-bde7-c793829fceca.roa (raw, json)
Hash identifier: nNcB/BkCS+DMywepK/6suMQnvMT1IJhnnNV0HjYDgrc=
Subject key identifier: DD:29:5B:B7:99:AF:F3:2A:35:4B:35:39:7D:B2:FA:25:9F:FE:E9:D0
Certificate issuer: /CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Certificate serial: 010D0C9F432858490CB16531B77B05D8DE93A600
Authority key identifier: B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/860f9ef3-7893-3281-bde7-c793829fceca.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 401041
IP address blocks: 192.25.8.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:65:31:b7:7b:05:d8:de:93:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=db4af25b-6622-4c39-9a8c-cba79e5bfa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:33:6d:70:f8:1a:84:1c:0c:05:2f:02:b1:
18:78:75:73:b8:44:2e:15:ed:a3:fa:e5:00:a9:01:
15:a2:f2:2d:3c:17:e1:19:72:68:b2:79:80:20:28:
c7:94:74:a7:69:1c:b7:bf:e4:c3:48:f9:c4:0a:66:
52:c3:9f:52:cb:4d:d4:0b:0a:12:f1:6b:da:a6:5f:
24:6a:e0:21:03:be:58:61:00:44:46:51:46:c0:6b:
e3:71:b0:85:f1:2b:32:2c:48:13:8f:ae:dc:a0:83:
9f:f5:11:a6:23:85:e8:9e:a0:42:ee:aa:ea:f6:a5:
c3:0f:da:c0:52:85:18:d1:a6:16:13:41:c8:ba:c2:
39:c8:36:88:19:9b:da:0d:a8:3f:4f:eb:11:d6:0a:
ee:72:27:6e:42:ed:42:ef:a4:e8:6b:5a:40:13:64:
71:8f:fc:08:93:ac:89:44:10:9b:90:f3:dc:a1:42:
71:81:c3:f3:66:2f:0d:ba:a6:6f:07:2c:b8:cd:34:
85:21:7e:09:6d:46:f8:b1:f8:88:77:ec:28:26:5f:
5a:aa:d4:b0:c3:db:cc:89:a0:a3:0a:e5:2e:ec:4a:
e4:24:16:de:a1:b5:2c:09:93:18:e1:bb:d9:49:ed:
19:66:b0:f0:3c:06:b1:22:a0:75:be:ed:71:2b:e6:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:5B:B7:99:AF:F3:2A:35:4B:35:39:7D:B2:FA:25:9F:FE:E9:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/860f9ef3-7893-3281-bde7-c793829fceca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl
X509v3 Authority Key Identifier:
keyid:B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
sbgp-ipAddrBlock: critical
IPv4:
192.25.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:bb:82:e4:97:28:45:e9:12:aa:df:fc:94:7e:14:8f:44:6c:
7f:94:80:1e:a8:c0:06:83:f1:8c:4c:46:68:26:4d:cc:c0:9d:
3e:76:1b:c7:f3:bd:86:5c:28:29:d2:e0:f1:70:ad:81:24:ce:
ad:5a:c0:84:0b:57:b9:c5:46:29:3f:a6:9d:48:b7:9b:a6:3f:
05:b6:8f:6a:07:db:90:15:66:5d:b6:57:82:77:a1:84:2c:1e:
80:51:7d:39:fe:cd:f9:43:c8:72:e7:0e:36:10:7d:95:f7:97:
7d:b3:79:91:87:7a:b1:fa:27:6d:aa:5f:ca:d2:78:09:82:86:
39:73:8d:d2:e6:76:04:45:00:29:42:14:ec:bb:10:a4:f0:ba:
80:08:63:9c:23:a5:58:c9:c9:fe:8e:18:63:2b:8f:03:94:f4:
d1:2f:fc:78:11:aa:25:09:58:3e:7f:cb:55:96:60:c9:3e:d8:
c2:c0:d6:1f:f6:2c:a8:cb:fd:3f:1c:f1:47:50:74:65:f9:60:
b8:b5:6f:da:06:1f:66:d2:08:e1:61:17:c0:75:89:45:af:18:
27:fc:8b:4c:f0:a0:4c:4b:a6:cd:ef:04:6e:1a:bc:d8:fe:a3:
37:6a:94:47:35:e0:95:4f:04:ee:23:3a:fc:f1:75:69:7d:5f:
a9:1a:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:19 2025 by rpki-client