Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa
File: 446319b8-ed67-3b03-a0e2-5a949ad2108c.roa (raw, json)
Hash identifier: nKBAM/5qgt9w7KcqBhd3Le8btI9J3MZb4UUcnx9dNaM=
Subject key identifier: 62:FC:D2:65:E5:CB:AF:2D:AB:F1:F1:83:D9:2D:BD:24:E0:A4:44:73
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F43285849393E6FBD3CD6E188C5AFF000
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 3557
IP address blocks: 192.5.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:6f:bd:3c:d6:e1:88:c5:af:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=9e3ea3dc-2a07-410c-915c-97a477b566f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:da:62:84:8b:fa:4b:e6:45:84:c3:cd:a6:
07:41:03:9a:17:99:4b:f1:b2:bb:a3:95:53:5c:e7:
9a:e9:09:96:a3:25:0a:06:53:2d:02:aa:11:d7:aa:
c8:9e:6e:ec:fb:f3:37:0e:e0:5f:3d:38:5e:c5:53:
c6:16:4b:62:7a:57:5f:57:7d:02:4a:86:02:dc:20:
76:95:65:0d:63:8b:6c:b7:cc:59:e7:7f:85:9e:bf:
0a:6b:47:b0:27:f7:88:cf:2d:a9:1b:3c:5b:e8:7b:
22:4f:da:41:a6:42:77:20:da:09:7a:e1:e3:0d:53:
c2:34:e3:e4:28:bc:2f:d1:72:27:49:a2:36:b5:1a:
45:46:4f:e1:02:79:9d:7b:00:e3:1d:ab:02:8d:f1:
e3:55:fc:1e:08:ca:af:c6:ca:6b:1d:95:25:34:c1:
74:0c:57:06:12:07:13:c0:0f:61:9e:98:a4:38:f1:
ce:5b:12:4d:35:8b:34:ee:f9:99:04:f4:a2:47:81:
7c:f6:70:f9:71:98:53:7a:3e:fd:84:49:43:3a:0f:
da:14:70:73:a4:f0:91:23:a0:00:2c:54:87:e0:87:
86:db:a4:72:ae:ec:9f:16:d3:35:e6:37:73:a3:18:
f0:75:59:f6:cf:21:e9:59:45:e9:e6:c7:d1:a4:37:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FC:D2:65:E5:CB:AF:2D:AB:F1:F1:83:D9:2D:BD:24:E0:A4:44:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:f4:0d:de:e0:6d:8c:c1:4b:db:fa:93:06:6d:63:51:de:b1:
ef:a5:ae:d4:dd:89:a1:ea:f5:ad:b3:53:86:1c:65:32:2a:62:
ba:ef:6c:4d:47:5c:67:9d:89:3d:b7:4e:f5:80:40:1b:79:14:
29:3a:14:7e:a7:ca:7e:96:72:8c:71:d8:71:8d:7f:dc:7a:be:
b0:a4:2e:75:1a:f4:46:38:1b:5d:f8:d2:c3:ed:05:2d:92:20:
e3:32:06:32:86:13:30:4b:eb:7a:d5:43:35:7f:e2:9b:96:a2:
a7:57:ba:b7:61:51:fc:d4:ea:e8:8f:ef:35:ae:6f:78:8f:51:
4f:a3:50:ab:7e:ca:b5:f1:6f:a0:e3:aa:59:cf:cf:c7:da:cb:
09:da:d1:21:06:b4:7b:31:fb:b0:07:13:88:f5:85:69:54:27:
74:98:f6:68:3f:88:a9:7d:dc:bb:46:4f:20:f4:e9:c4:4a:65:
35:d6:5c:08:83:82:e5:39:3f:e8:9d:40:6c:54:26:f8:e8:c2:
b9:63:dc:0e:03:06:aa:84:2d:4f:11:67:a7:01:0d:c0:63:ca:
11:87:7a:7e:e0:5b:fb:19:33:57:fd:0d:7b:e2:8c:c8:10:18:
54:78:2e:b4:1c:7a:ec:65:cb:88:bf:63:66:34:4b:08:ee:ea:
2e:45:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:56:59 2025 by rpki-client