Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa
File: 37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa (raw, json)
Hash identifier: W5xn7kQugZAffH8CvN3yClbc9y3OOBeiSIp+1YXiPEk=
Subject key identifier: 11:9D:64:4C:E4:CB:AE:A8:FF:F6:0F:2D:01:3B:D2:DE:4F:44:7E:93
Certificate issuer: /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Certificate serial: 010D0C9F432858490B4C1B36BBAF1FEED30A16C0
Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 62659
IP address blocks: 192.0.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:1b:36:bb:af:1f:ee:d3:0a:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=7b231c46-1f65-47c4-a89f-7100cc3b89e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:77:4e:f1:03:68:c1:e6:97:60:70:23:66:
f9:55:7f:ef:4f:d7:b8:a8:a9:2b:6f:91:40:ba:6c:
fd:a4:51:08:b5:b5:d5:68:f1:29:f5:0f:76:59:8c:
74:3d:c8:7a:6c:62:4c:24:13:a1:a5:57:d7:02:de:
8b:92:9b:38:9b:f8:ce:25:2e:9c:5f:4a:95:e0:20:
fb:7b:d2:d6:62:f4:22:d8:2f:7f:20:d2:5b:ca:a1:
02:18:95:32:64:04:c5:4c:3a:78:b5:e5:94:a2:60:
75:f3:c6:49:a8:f9:88:5b:bc:2f:09:be:96:d3:5e:
0f:2e:24:11:bf:73:dc:ee:be:49:44:ab:a7:b8:8c:
4c:f5:13:77:39:33:db:c4:5f:e5:8f:2f:20:0b:74:
00:88:a4:77:e0:b9:fb:53:91:74:02:28:b2:73:c1:
4e:f5:d9:fc:b1:c3:8c:5c:e4:70:12:7d:ce:67:49:
d9:e9:ca:29:3a:28:22:10:ac:d2:53:3d:85:39:04:
c0:a7:9e:2d:47:25:4f:20:ab:a8:61:52:fd:79:9b:
06:85:13:b4:4f:f8:28:aa:66:54:93:3e:55:e0:1b:
0a:18:e1:58:22:23:e1:16:5c:48:f1:a5:3a:9c:6b:
7e:85:af:0d:f0:55:71:a9:95:89:0a:b4:21:af:47:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9D:64:4C:E4:CB:AE:A8:FF:F6:0F:2D:01:3B:D2:DE:4F:44:7E:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl
X509v3 Authority Key Identifier:
keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
sbgp-ipAddrBlock: critical
IPv4:
192.0.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:2a:d6:63:40:18:64:0a:d0:d5:92:b6:5d:5e:6d:9e:55:19:
79:56:c5:a4:06:ff:73:e8:6f:77:a0:f9:92:c3:cf:27:b5:08:
2e:2e:d2:59:6a:ca:97:0a:31:19:28:61:db:d8:b9:af:f7:78:
ef:71:b8:c6:3b:9f:f0:c6:b7:11:8f:9f:ea:c7:d1:2e:5f:a9:
b7:a5:82:2a:a8:29:bd:8b:e8:16:74:fe:52:8e:2a:68:cb:f3:
16:a3:66:e7:ed:76:6c:c0:c7:11:32:3f:c0:5a:21:23:ae:c2:
06:8c:71:14:cc:3a:35:3c:08:58:de:6a:78:5e:15:f3:0e:d7:
88:8f:1b:e2:fb:f1:ff:23:17:d6:ec:5f:dd:17:a3:e4:16:6c:
d6:c3:80:be:50:24:cc:6b:7f:8d:f1:4e:d2:be:5d:d1:c2:5f:
46:18:bf:7c:13:ec:cb:73:65:8a:8e:b6:ef:41:66:b1:b8:e2:
7b:22:18:7f:90:f0:45:f3:dd:aa:1e:9c:b9:8b:3a:10:8e:55:
65:10:01:a8:8d:b1:e8:ad:6a:ae:69:37:ad:84:c3:dd:5a:0d:
bc:94:f0:0c:7f:29:53:31:4b:fe:01:27:3b:46:04:b2:d3:97:
fb:b5:d3:dd:2d:d6:41:bd:17:63:33:65:be:3e:ec:27:c9:bf:
ae:df:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:35 2025 by rpki-client