Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa
File: a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa (raw, json)
Hash identifier: MKE+Fqqd0rHIFWZ1vZG03jC00AsDQCjRkPb0o4gy5rM=
Subject key identifier: 7C:6D:48:DD:5D:70:9B:81:5D:58:11:A1:C0:54:05:3B:47:BD:80:AC
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F4328584878476B61BA9C04E93DDC0140
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa
Signing time: Tue 07 Jan 2025 22:07:47 +0000
ROA not before: Tue 07 Jan 2025 22:07:47 +0000
ROA not after: Mon 07 Apr 2025 21:07:47 +0000
asID: 203963
IP address blocks: 192.190.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:47:6b:61:ba:9c:04:e9:3d:dc:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Jan 7 22:07:47 2025 GMT
Not After : Apr 7 21:07:47 2025 GMT
Subject: CN=d1876c24-f928-4b54-aa04-4b663f25f781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:47:84:e3:3d:0e:96:7c:8b:0c:67:52:22:f5:
5e:33:dc:9e:71:a9:5a:cb:3c:e2:35:30:fd:8e:dc:
89:37:a4:36:bb:20:f4:d7:63:9c:8b:c1:6c:f3:68:
68:08:22:d6:e0:84:fb:cf:4e:8b:e9:78:c0:a7:19:
e8:24:61:f9:71:b0:01:47:86:5d:9a:be:91:bb:b4:
bc:2c:f4:6e:dd:a4:33:49:c9:6f:05:86:b1:40:79:
d5:a6:fa:eb:e9:ed:74:1b:10:be:62:c4:ef:b3:8c:
4b:da:45:e6:af:48:20:fd:38:47:95:21:9f:22:03:
31:46:59:b3:42:16:8c:88:ae:14:ec:cc:e5:0c:31:
96:76:cf:a0:4f:45:9a:57:f8:98:47:94:77:82:2f:
d2:a0:e3:c2:96:02:c2:d2:ab:44:1f:83:31:29:e9:
3b:f8:d9:2f:6e:74:1c:1b:20:cb:65:ec:7c:18:23:
78:0f:0d:0d:98:e2:9b:38:26:bf:3c:e1:26:16:8b:
8d:de:15:81:7d:fc:27:84:d0:a1:8d:fb:43:4c:e7:
23:7d:05:29:b6:2f:3f:66:fd:5d:19:4e:35:96:66:
df:5a:2e:88:4f:7e:e8:33:35:d4:80:d3:b5:05:48:
11:7c:2e:8d:42:21:7b:cc:01:51:45:3a:fb:e9:e1:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6D:48:DD:5D:70:9B:81:5D:58:11:A1:C0:54:05:3B:47:BD:80:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.190.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:32:41:7c:13:3d:b3:70:f1:ef:1e:eb:49:f5:78:d1:d2:b4:
f5:5c:e0:18:f6:6f:c3:b0:5d:b0:8a:b4:b7:b4:f4:5e:bf:5d:
f4:85:b7:78:0f:cc:54:1c:a3:84:51:dd:db:d8:18:8a:31:2d:
f6:f5:87:e6:09:26:bc:9b:c6:2d:6b:c5:a7:04:a0:c9:91:26:
b0:39:57:cc:dc:36:68:51:82:b6:85:ee:05:eb:2c:82:bf:79:
27:dc:6f:39:87:f4:31:ad:c6:10:2b:19:2b:e3:b2:c9:bc:ee:
80:06:14:36:01:81:d4:77:42:cb:5f:7f:a6:5b:38:4b:7c:03:
d2:bb:52:8a:1f:79:02:d5:21:a5:b3:7a:3a:f7:9e:c0:66:81:
28:d7:39:87:c7:e3:35:03:53:77:ab:cd:5a:d4:71:47:94:78:
8a:96:d6:1e:20:b3:78:f7:62:cb:91:8d:7d:26:99:0a:23:90:
9e:a1:0b:bb:ff:e4:c6:d5:c9:de:31:95:7a:c5:74:ae:c2:c1:
b9:74:54:a8:22:f7:0b:97:83:c2:d6:21:95:e0:17:f6:b0:f2:
cd:9f:ac:8c:ee:14:ec:3c:a6:70:dc:7a:1f:ec:9b:1e:b8:84:
e1:aa:0e:7d:51:fd:31:8f:25:53:8e:d3:ca:c0:2d:21:94:f9:
5c:d5:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:46 2025 by rpki-client