Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/52b67526-159b-38ee-8f54-0f34f3fddf73.roa
File: 52b67526-159b-38ee-8f54-0f34f3fddf73.roa (raw, json)
Hash identifier: gNAsao5aYb+kIcxojPuhPZ/6tLmWC5snFPNEniz6sCI=
Subject key identifier: 53:CA:17:8C:5C:15:66:2C:DA:4E:61:01:54:02:58:A7:91:9B:2E:A2
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F43285848FD56BA3773C6D51FC2FD6C80
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/52b67526-159b-38ee-8f54-0f34f3fddf73.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 174
IP address blocks: 199.48.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ba:37:73:c6:d5:1f:c2:fd:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=ef5284c5-b8f9-4e49-8837-ae2980f15f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:bf:2d:74:09:7b:12:72:c8:d8:ea:f9:e7:
0c:2a:cb:f0:65:99:10:da:f2:40:7a:0b:ab:5d:15:
c0:fe:f8:2d:8a:28:af:06:0b:4b:a2:02:dc:ca:89:
9a:69:c5:8c:b7:9f:74:37:15:c3:4b:18:66:1a:7c:
73:cf:bd:e4:90:53:70:b7:61:36:72:bf:c1:37:cd:
ad:76:a5:5f:d2:d6:c0:fd:dd:85:db:b9:46:de:77:
b6:fd:84:5e:67:8b:c5:39:00:c0:8a:01:1e:fa:c4:
37:53:cd:15:fd:b5:5a:ed:bd:af:c0:26:f9:34:38:
e8:7f:8f:f8:a1:3c:af:02:14:e2:56:c0:97:c6:3b:
71:2d:ae:5f:b9:a4:2f:fb:65:a0:bd:2a:5d:b9:0c:
be:18:1b:89:d2:f5:34:a1:f8:d7:db:a2:e9:e3:0c:
3e:32:72:3e:f6:b3:5a:49:23:ec:bd:85:2e:e8:3c:
a8:85:ef:aa:42:a6:72:69:86:5e:99:75:7c:31:4f:
4f:53:90:9a:70:33:6e:cb:c5:9e:2f:c4:de:67:38:
30:92:3b:20:ba:b7:fc:ff:b7:d2:0a:7d:e9:32:cf:
c2:2b:e7:b3:c2:38:47:3c:cc:3e:a0:34:ce:a1:1c:
7d:55:05:12:d1:8b:f4:2d:6f:5a:cb:54:3f:fd:61:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CA:17:8C:5C:15:66:2C:DA:4E:61:01:54:02:58:A7:91:9B:2E:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/52b67526-159b-38ee-8f54-0f34f3fddf73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:e1:a7:a4:cf:8b:65:2e:e1:2c:ff:9a:54:96:95:fd:1c:b7:
cc:88:86:56:26:ee:ca:e1:17:7b:7e:a1:7a:0e:6b:7f:3f:ec:
e5:61:c8:8e:96:e5:ef:8d:c0:04:12:65:0c:bc:e3:44:b8:74:
d8:0b:1f:a9:4a:f1:67:b8:79:17:24:4f:81:19:8b:ef:79:d5:
01:6b:9f:0b:5d:36:b9:77:cd:f5:aa:5d:32:eb:cb:20:a6:e9:
47:f2:49:a5:ba:c7:53:ff:24:1b:ab:92:b8:10:f6:a7:a1:41:
4e:e1:05:79:db:3f:00:1c:74:e1:e1:bf:61:ae:7d:48:2a:1e:
64:24:fe:91:1f:2a:9d:ea:46:08:78:3b:d7:f8:30:24:d1:d8:
2a:c4:aa:74:a0:07:1d:ed:7e:c0:69:84:bd:a4:94:b9:0f:68:
27:75:33:50:5b:5a:a8:d8:ba:28:fa:cc:25:7d:f4:cd:f3:87:
fc:b3:7d:df:9d:2a:21:7c:7d:17:51:51:c7:e4:90:53:53:d4:
76:97:f9:2f:a3:da:e6:82:8e:71:b6:ba:a5:1b:59:ac:f1:fd:
96:ae:c5:b4:59:d1:89:e4:6e:7a:7e:8c:8b:96:f3:9d:7d:d8:
5a:7d:f8:6e:3c:48:3d:9d:2d:f8:1b:05:58:c8:a6:cb:f8:b8:
3b:59:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:28 2025 by rpki-client