Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/5db14e16-a85d-38c4-8a67-fe89349f1d02.roa
File: 5db14e16-a85d-38c4-8a67-fe89349f1d02.roa (raw, json)
Hash identifier: cJmfznjzoYnzQwugNTFnsOnzs1i3j4FkUvB9EUz8gL4=
Subject key identifier: 99:FC:78:A0:D5:A7:B9:34:A3:A4:F4:20:C3:F4:82:E5:A8:3D:44:17
Certificate issuer: /CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Certificate serial: 010D0C9F43285848D4DB952ACA134BA3A0221D80
Authority key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/5db14e16-a85d-38c4-8a67-fe89349f1d02.roa
Signing time: Mon 10 Feb 2025 02:00:38 +0000
ROA not before: Mon 10 Feb 2025 02:00:38 +0000
ROA not after: Sun 11 May 2025 01:00:38 +0000
asID: 8075
IP address blocks: 192.30.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d4:db:95:2a:ca:13:4b:a3:a0:22:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Validity
Not Before: Feb 10 02:00:38 2025 GMT
Not After : May 11 01:00:38 2025 GMT
Subject: CN=b12c24df-4579-4f2f-a924-ed4caf79e61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:d4:f2:95:0b:ed:d1:c4:bf:18:b8:5b:c3:
28:1e:bc:a2:1f:39:37:be:c5:d6:f0:8d:5f:5f:24:
df:67:6e:41:0a:3b:9b:be:6e:8f:78:b6:d0:4f:08:
26:9a:75:c2:e1:2d:f5:ca:a4:de:f7:25:de:a9:a7:
4c:18:ba:57:4c:d5:53:64:ee:77:36:66:34:e1:5a:
30:40:e2:06:0a:01:b1:8d:1d:19:33:01:2d:4d:33:
e0:fc:60:13:d7:e3:78:02:99:5f:24:88:91:4f:3d:
7d:a1:f5:0f:e0:68:96:53:96:31:38:dd:c9:7b:7f:
17:e5:78:5e:83:4f:5e:c5:7c:24:57:23:cf:39:fe:
e0:99:f5:cd:f1:b6:46:25:ad:a3:32:0a:f9:89:4d:
a1:12:9a:8e:3b:87:45:64:d5:b5:f3:cb:db:33:0e:
6d:c3:c6:4f:c0:a0:4b:69:00:0f:9d:aa:b4:48:1c:
cb:a9:ac:0c:24:85:aa:1e:e1:8b:d1:04:e5:3f:bd:
be:80:bb:4a:d0:91:7e:5b:f5:a8:86:97:7c:79:d6:
a2:1b:8a:27:d9:3c:b0:27:81:5e:82:ed:a5:31:56:
2c:71:6d:52:ee:1d:4a:36:8d:2f:ae:58:22:ec:7e:
fa:0d:25:cc:89:75:8a:bc:5c:3e:de:19:34:e0:69:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:78:A0:D5:A7:B9:34:A3:A4:F4:20:C3:F4:82:E5:A8:3D:44:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/5db14e16-a85d-38c4-8a67-fe89349f1d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl
X509v3 Authority Key Identifier:
keyid:03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:dc:ed:28:10:a0:b2:bf:a4:02:64:e0:c9:34:92:15:0b:a4:
0d:93:21:f2:30:34:c0:ba:be:90:38:ef:ca:ee:7a:0c:c2:80:
24:6e:29:9f:a2:8d:a3:9d:74:cf:5c:e6:56:8f:c9:26:f7:f8:
2b:4c:3a:f1:33:a2:8a:b3:a9:2c:9f:09:f5:6e:28:68:9e:fc:
8c:71:8c:ce:35:3d:a9:1a:ae:24:78:46:a8:01:3d:9a:2e:d9:
3a:a9:5a:8e:6f:34:3b:89:1b:93:d6:f1:76:d4:36:29:f2:85:
c2:ef:16:85:c4:09:26:b5:62:68:5c:4d:64:25:38:c0:90:3e:
65:c5:ff:e1:28:1d:33:6c:52:8c:4c:4b:f8:bb:26:c6:73:8b:
31:eb:99:9c:03:22:a0:0c:64:07:50:83:b9:25:fa:83:86:80:
c3:b1:da:17:d5:9e:c6:9a:5e:32:a3:01:0c:9f:70:69:4c:f7:
aa:c9:7f:a0:32:58:1d:6a:dc:dd:d3:0c:4a:c5:98:7a:f0:04:
c6:df:79:40:1e:24:77:d3:18:d9:c6:a1:fb:7e:68:a6:01:a1:
69:df:9f:6f:01:83:87:a1:46:61:88:cf:8a:23:44:cd:3a:67:
46:37:40:a8:84:87:5b:df:cf:fa:32:19:a7:c4:e3:2f:ce:74:
ba:9f:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:16 2025 by rpki-client