Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa
File: f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa (raw, json)
Hash identifier: PY/xkxLUltaAm58jHCnzho4FoiNu46wSvPAQamiBDN0=
Subject key identifier: 4C:AD:93:77:39:8E:4A:B1:75:7A:86:3A:C1:78:D7:72:24:B4:E4:A1
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285849393E7782BBDFB9237463C940
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 1280
IP address blocks: 192.158.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:77:82:bb:df:b9:23:74:63:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=2674d85a-8f7e-4f15-80f5-18d1953fab98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3b:07:c8:3c:ca:26:10:37:f0:5f:7e:56:be:
85:9f:c2:95:46:7e:ae:e9:9b:df:b7:81:e0:51:14:
dc:6c:07:08:a4:cb:98:36:4d:ab:4e:3b:71:e2:92:
eb:25:df:08:30:28:c5:cf:c4:6e:a1:dd:79:57:a2:
e9:b4:fb:75:73:97:75:09:ed:d8:14:02:e9:11:cc:
ec:4e:a0:37:58:24:31:63:fd:f0:2b:46:79:76:f2:
30:f2:06:b1:df:d9:31:27:12:3e:64:45:9e:25:3c:
13:d2:19:aa:37:12:03:c8:5c:85:62:24:48:83:b1:
54:52:e6:06:ef:76:8b:cb:8b:aa:ce:26:61:6a:a8:
87:0c:bd:25:bb:f1:94:cb:cb:23:33:01:ad:9a:1d:
00:e5:5d:99:1b:0b:d6:77:b6:c4:71:3f:a2:8d:4d:
86:4a:a9:cc:78:09:40:27:30:14:84:e5:50:e8:45:
e0:63:fc:e7:03:28:ba:5f:14:07:be:bf:f8:57:1a:
68:a2:0f:e9:08:1e:6e:8b:5b:6a:70:e8:fe:b2:e0:
ff:3e:2e:48:1a:f0:f8:cf:92:d2:6e:b9:9a:da:dd:
88:d6:4b:2a:f2:b0:b0:c3:a9:ea:e6:21:09:a9:5c:
34:cf:90:f5:0c:46:ca:c8:89:e0:25:d7:fb:0d:7b:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AD:93:77:39:8E:4A:B1:75:7A:86:3A:C1:78:D7:72:24:B4:E4:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
192.158.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:bb:2e:75:d7:10:e8:07:74:c3:8f:65:01:f4:3d:6d:8a:5e:
99:53:44:b2:d5:ce:78:03:6c:47:c4:c4:83:92:45:7f:41:47:
0c:61:73:cb:fc:09:6c:82:f9:ed:61:a5:ef:26:e2:a4:fc:27:
9a:52:ca:5e:89:ae:ee:dc:64:1c:00:5d:69:e4:57:21:23:49:
81:b6:97:c1:b7:74:59:11:f3:a9:ba:4c:dc:f0:c4:ff:cf:99:
b0:36:a0:15:4c:70:d4:9e:a0:9a:d1:c3:9f:c0:6e:e9:44:db:
96:5f:31:34:90:a9:44:81:e8:2c:6f:3d:69:c5:23:a0:a8:90:
a1:88:22:83:ad:cc:f8:79:e7:42:97:6b:ba:4c:54:d4:11:61:
bd:38:4f:b5:0e:d5:7c:1c:8c:69:d7:9d:58:ce:7e:98:df:97:
9e:77:ae:59:ce:82:1b:16:d7:58:28:88:15:dd:48:d4:dd:75:
7d:4d:ff:0c:e8:a5:5c:25:9a:d8:d9:62:c7:21:84:0a:65:af:
6a:f3:3c:1b:d4:a7:42:85:b0:d7:5f:56:a4:41:e3:1e:41:71:
41:89:e1:73:6a:88:86:88:09:e7:9c:21:f4:b2:0f:93:5b:4c:
68:ad:73:eb:29:60:da:0e:b4:8d:c7:7b:59:f6:95:b5:38:99:
bb:d4:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:36 2025 by rpki-client