Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ccc41170-0c0f-3b56-b819-710416195ea9.roa
File: ccc41170-0c0f-3b56-b819-710416195ea9.roa (raw, json)
Hash identifier: 3tpKbo3W2iEDJ38Lh935JoL2g7S4PULGUGWJYgidTFM=
Subject key identifier: 25:07:06:7C:C9:BA:E0:99:78:68:3F:A3:37:10:4A:B8:EC:06:82:F8
Certificate issuer: /CN=ceb51013-50fe-40c8-8358-fbacb2186cda
Certificate serial: 010D0C9F432858488DAB46D4A662EB5E7930E300
Authority key identifier: 92:D2:A5:78:F5:5E:44:DC:2E:E9:2F:9A:B1:F2:40:C4:0C:81:13:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ccc41170-0c0f-3b56-b819-710416195ea9.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 13460
IP address blocks: 192.111.38.0/24 maxlen: 24
204.107.64.0/24 maxlen: 24
2620:130::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:46:d4:a6:62:eb:5e:79:30:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb51013-50fe-40c8-8358-fbacb2186cda
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=84e17f5f-5e04-4556-9a7e-d5daadc25c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:bd:72:ae:66:df:ee:b3:ec:c3:1e:47:de:
bd:c6:ec:67:79:bf:cf:44:68:fa:6d:52:ed:af:68:
a4:e0:0e:d2:62:81:4a:62:d7:13:db:c9:61:73:fd:
2f:4f:4c:b2:96:ea:a3:1b:78:3b:c2:75:7a:8f:40:
b2:ed:42:3d:df:cb:2e:98:39:f8:ba:7f:5e:67:eb:
0f:55:79:f7:8e:9a:da:6f:dd:35:f7:5d:dd:8e:b8:
a1:e1:23:8b:ed:bc:78:37:00:88:31:d0:45:8e:53:
66:ea:5d:0b:4f:b4:4d:b4:cb:ae:f0:9f:33:e3:5f:
f5:00:ed:56:db:a2:68:84:90:a4:09:96:e6:d4:96:
90:c2:f6:3d:40:b0:f7:e1:be:a8:e5:0a:a3:95:48:
89:bd:96:a5:14:a1:ef:19:0c:c0:8c:fd:f7:4d:a7:
a2:77:be:b0:1e:6a:10:cf:eb:e7:c5:dc:08:db:69:
08:f4:1c:c8:19:89:b9:2b:6f:b4:07:a4:8f:65:fc:
6c:fe:04:83:5a:f7:c1:5d:34:04:c7:87:cb:87:0b:
a2:d1:79:8f:67:7f:1e:59:28:64:ef:f5:ca:d0:72:
88:63:68:cd:a5:23:ff:8c:29:e4:ec:aa:95:17:07:
d2:9b:7c:17:80:0a:bd:e2:dc:a1:9b:80:2a:4b:22:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:07:06:7C:C9:BA:E0:99:78:68:3F:A3:37:10:4A:B8:EC:06:82:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ccc41170-0c0f-3b56-b819-710416195ea9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ceb51013-50fe-40c8-8358-fbacb2186cda.crl
X509v3 Authority Key Identifier:
keyid:92:D2:A5:78:F5:5E:44:DC:2E:E9:2F:9A:B1:F2:40:C4:0C:81:13:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer
sbgp-ipAddrBlock: critical
IPv4:
192.111.38.0/24
204.107.64.0/24
IPv6:
2620:130::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:5a:e5:a4:de:67:76:b4:01:2c:75:67:9d:ba:45:be:dd:ed:
34:6c:a3:61:2b:b2:97:62:ff:64:5c:b2:8f:19:01:92:df:03:
7d:c9:2f:5a:22:10:9a:9a:61:aa:54:d9:1b:cc:71:87:01:c0:
db:a6:45:36:88:0a:f7:36:9d:39:fe:fd:15:bb:74:9d:51:11:
cd:7e:72:6d:b6:aa:77:35:3d:64:9d:c1:4e:c8:eb:ef:b4:cf:
2d:e6:51:0f:f6:0a:64:17:fc:5a:9d:e3:e6:5b:c6:93:70:43:
41:76:81:ed:50:84:73:d4:74:28:31:74:1b:37:c8:39:2f:22:
4d:f3:1f:71:3f:df:79:98:b1:b0:1f:9a:99:85:4a:66:36:79:
de:89:5e:d8:ed:81:d2:62:25:5e:81:27:ea:df:bc:89:97:28:
36:a8:f9:a7:4d:f5:ce:d9:3c:70:55:2b:2f:f9:b9:2c:03:8b:
ce:a3:22:64:91:03:48:04:69:f5:d6:3f:51:da:4c:d0:44:1a:
d6:ab:a9:bb:1d:14:7c:2d:88:5e:25:7d:cf:d5:fc:b1:e1:0c:
22:3d:d0:fc:cb:b6:56:84:84:48:f8:06:c7:b7:54:c3:2e:f6:
0d:de:19:e9:81:71:2e:df:d9:93:2a:a8:7e:1d:fa:b4:d3:bb:
e9:95:7a:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:43:27 2025 by rpki-client