Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/915472ec-3ee3-374f-a1cf-a02c24d2a966.roa
File: 915472ec-3ee3-374f-a1cf-a02c24d2a966.roa (raw, json)
Hash identifier: daj2qyhYosu8UI2NbTRvnbZ+Lr0NvwAJsZ3ydql7zP0=
Subject key identifier: 1A:D8:B1:29:7E:59:D0:CB:4B:A9:FD:DB:FC:D1:DB:C3:A1:BB:7D:DD
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F432858494B640B9021344BEA59D94E2A
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/915472ec-3ee3-374f-a1cf-a02c24d2a966.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 19437
IP address blocks: 172.96.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0b:90:21:34:4b:ea:59:d9:4e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=487e3da0-2dc0-4444-9f76-1da131b60fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:eb:3d:b9:6c:9b:81:9a:14:30:ff:05:76:
7f:6e:68:59:02:a1:82:f7:56:79:1e:2f:f2:fc:2e:
b7:3a:d3:03:45:77:c7:88:e1:d6:f9:12:b5:65:7d:
65:fa:28:49:ff:d9:64:ef:6f:29:90:59:1d:2e:f2:
cc:71:2c:01:47:7f:ed:e2:13:74:e6:75:dd:89:2b:
19:7a:ad:d7:43:03:85:56:b0:0b:66:7a:70:bb:a5:
ea:98:02:7c:d3:b2:7f:16:ff:5a:75:3e:b5:1f:c5:
f0:07:04:d6:62:5e:a4:0a:50:90:d0:25:f0:7a:e2:
28:a9:9f:53:6e:21:aa:c6:44:02:ba:3f:0d:10:27:
70:78:a5:e0:3a:56:54:16:2b:23:be:01:61:b4:8c:
56:1c:70:d4:ef:4e:73:c9:23:43:10:40:9c:b5:52:
2a:08:76:9a:06:f5:17:75:9a:00:ee:f3:55:f4:0a:
da:a7:2d:60:d4:04:7f:f9:19:93:24:b4:00:87:77:
b1:23:2a:96:1d:ce:e7:4b:25:1a:df:85:fb:6b:fc:
67:d8:5b:36:04:b5:91:a3:db:9a:13:5e:21:4d:ec:
f9:23:22:92:0d:be:a7:4d:a6:d3:02:02:2d:68:b8:
a1:b1:00:8a:87:c8:e9:07:5c:15:46:3e:aa:05:ad:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D8:B1:29:7E:59:D0:CB:4B:A9:FD:DB:FC:D1:DB:C3:A1:BB:7D:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/915472ec-3ee3-374f-a1cf-a02c24d2a966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:cd:8e:62:66:9e:c6:c2:9b:ba:f6:03:f8:f8:92:1a:e1:4a:
80:16:8a:45:50:48:7e:1e:2f:49:75:90:53:3a:d7:63:e9:65:
48:d3:67:ba:05:c5:a5:8e:42:81:cc:12:00:45:c9:1d:7a:ef:
94:1c:8d:63:df:c4:bb:cf:3d:fa:ce:99:70:8a:9e:b1:23:21:
8f:79:9a:e7:75:a8:44:28:4c:0e:d7:c2:9b:e0:a8:cc:72:30:
2e:c2:fd:b5:99:08:98:78:60:72:df:cd:08:7d:81:94:5f:d9:
cd:f8:eb:7c:ce:e5:55:af:7e:e0:1e:91:a2:cf:c2:72:ac:f7:
e6:c9:27:5c:e2:40:10:7b:51:50:c4:e3:d3:fe:69:ae:ad:75:
3e:fd:03:15:a6:78:82:63:c1:7e:80:98:ec:a1:ca:22:b6:7f:
ce:a1:3f:53:09:83:11:c4:de:05:d2:d5:38:d5:09:f1:08:47:
2e:ad:7f:a8:54:a1:38:c7:8c:98:ee:5a:fe:8b:f8:23:dc:d9:
68:0c:1c:a2:c3:80:f4:ae:90:38:16:18:19:19:2a:71:db:d2:
ee:d9:86:27:ac:61:13:fd:4d:2f:0c:04:5b:99:2d:1d:78:e1:
68:46:51:b3:6d:c8:7f:e0:86:13:7f:3b:b3:49:a1:04:de:77:
7f:33:d9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:43:06 2025 by rpki-client