Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/18c0272f-ec13-3056-9a22-d6bf7861f227.roa
File: 18c0272f-ec13-3056-9a22-d6bf7861f227.roa (raw, json)
Hash identifier: smu5a1eLHWeVVRfMB+ugzUFm3IB0WMXvIJwhDKGEkCI=
Subject key identifier: 2D:7F:DC:8A:DD:E2:0A:C9:97:78:0A:F2:CC:F5:72:71:6D:45:63:77
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB754E6C11B8F3ECBBF200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/18c0272f-ec13-3056-9a22-d6bf7861f227.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 75.158.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:75:4e:6c:11:b8:f3:ec:bb:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=66816d8a-04a1-4a31-8914-e69013f6e326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:d4:77:4c:75:4c:1a:fc:8e:46:59:e4:77:
7e:0c:3f:94:52:c3:12:3e:a2:cc:cc:ad:49:94:6f:
23:fe:d6:2d:37:38:58:d1:77:2b:d3:af:5d:38:6b:
48:4a:8a:29:42:8d:24:74:49:03:10:d2:4f:55:f7:
60:60:8b:23:ff:3b:d9:06:99:1c:81:62:fe:72:2f:
77:a0:a3:96:d5:d9:79:b3:1c:d0:6b:33:9d:5f:1e:
60:cd:6a:be:74:91:43:9f:8b:a9:5c:4b:68:bf:42:
93:ba:09:39:dc:0d:82:ac:8a:ab:fe:2f:cd:45:ce:
4d:eb:dd:81:32:65:92:16:43:f1:7f:1a:2a:7b:44:
c9:ce:28:63:bb:ce:1c:9c:a8:8b:1e:90:a7:89:49:
e3:67:b1:e8:9f:9b:2a:dd:88:e9:91:d7:8b:ea:3e:
99:29:79:ca:85:6b:18:2b:d4:a0:31:40:b4:fc:9f:
e6:50:c1:eb:8e:e0:54:45:24:9e:2d:06:9e:90:c3:
ee:b5:73:8f:02:ca:59:7a:a4:c0:f8:01:74:ef:0e:
c1:f9:f3:5d:27:42:2d:d6:0a:71:44:bb:90:4b:78:
79:b0:ec:6a:f8:20:f2:b2:dd:b8:d1:3b:3c:b8:a5:
61:f2:14:bb:ee:ce:54:75:e0:6f:af:2a:8e:54:f1:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7F:DC:8A:DD:E2:0A:C9:97:78:0A:F2:CC:F5:72:71:6D:45:63:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/18c0272f-ec13-3056-9a22-d6bf7861f227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
75.158.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:0c:ac:78:a1:79:89:43:e0:b7:8e:e5:79:90:05:c1:af:0c:
c3:29:82:14:bc:c6:05:43:b7:f1:47:d2:d4:90:37:92:17:7e:
b9:3d:53:f6:d7:c6:f1:00:78:90:23:83:f5:c1:89:29:25:7e:
94:5f:57:27:59:bc:f9:1c:4f:b7:f1:fd:58:9c:a3:20:af:ff:
b2:1a:07:f3:e1:2e:05:cc:95:f4:87:81:44:2e:d2:75:a7:b7:
b1:f3:72:b4:ec:7d:66:73:ae:8f:7e:28:e3:e6:ad:c5:1c:af:
34:25:95:cf:50:64:59:5a:38:2d:9a:cd:19:50:72:7b:d6:5f:
e3:44:2f:14:67:df:60:18:e3:11:37:bd:48:7d:91:2a:20:52:
2d:c1:f6:8a:9b:c6:7d:dd:5a:1f:cb:80:d0:ff:85:71:d2:e1:
45:e9:35:c6:d5:d7:b7:35:fa:12:e3:00:13:1b:8f:46:0b:ba:
bb:c0:c5:96:ea:84:98:e5:bf:b2:ab:a9:7c:6c:aa:7e:22:ca:
ae:0f:54:19:59:ec:6d:c9:a9:5a:80:9f:60:e7:44:ed:80:4e:
13:db:2c:a4:d6:f8:95:85:70:16:e9:bf:b4:15:3a:5c:f8:52:
43:16:68:a1:f9:fe:5d:fd:1f:51:76:49:8c:b2:68:6a:84:9c:
00:92:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:08 2025 by rpki-client