Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa
File: a903e824-1b66-364f-8ea4-9393ef2de488.roa (raw, json)
Hash identifier: nU7zkn00RylR8o3sv8A5+e+59E6pzEu+YCz9Bjpy3Eg=
Subject key identifier: 5A:EA:7B:58:4A:92:07:53:FB:A8:9F:A1:10:AD:86:B8:3B:A5:BD:A3
Certificate issuer: /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
Certificate serial: 010D0C9F432858494303EC7ED1C6D107C5CBDAC0
Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 198949
IP address blocks: 192.245.221.0/24 maxlen: 24
192.245.222.0/23 maxlen: 24
192.245.224.0/24 maxlen: 24
199.33.130.0/23 maxlen: 24
199.33.132.0/23 maxlen: 24
199.33.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:ec:7e:d1:c6:d1:07:c5:cb:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=17ab019a-44dc-45c6-ae03-93cbe248037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:be:b1:dc:dc:9d:02:40:9a:2d:89:4d:83:
86:06:f4:98:90:3b:c4:af:83:53:07:98:ef:91:82:
4d:9b:e4:f0:b5:16:b5:61:4d:82:e8:b1:69:be:bf:
b6:51:ca:0b:de:8e:09:60:e5:b0:77:3f:a0:8e:06:
4d:f0:9a:20:73:c7:61:72:aa:6b:4b:82:93:46:5a:
da:64:c8:f9:4c:7e:89:22:06:95:ac:35:97:0a:4d:
d9:ef:43:47:07:e6:24:48:94:e1:c3:d2:f9:19:4d:
a7:a9:3d:83:c6:82:ca:97:54:10:17:f0:8b:a5:ef:
d3:16:e5:9b:96:c7:03:fd:25:51:72:0d:18:f4:5e:
36:7a:7c:e2:de:8d:4f:fd:a4:9e:6e:3d:25:25:37:
97:58:50:c2:4a:1e:e1:34:ab:8d:cb:1f:cc:cb:65:
65:93:c4:47:2f:0f:d6:c8:cd:ff:01:56:5d:2d:ce:
ba:93:ca:71:4a:d8:13:4c:fb:a5:0e:03:f4:02:3e:
15:f4:37:f4:43:17:85:61:69:8c:81:51:60:ac:ae:
c5:f9:24:ce:ef:96:ec:47:08:e6:a6:8b:b1:96:df:
16:b5:99:59:7b:79:c8:ba:53:8e:f7:33:f2:af:1e:
e2:a3:a6:9c:4c:4b:48:93:95:e8:43:90:6e:66:f0:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EA:7B:58:4A:92:07:53:FB:A8:9F:A1:10:AD:86:B8:3B:A5:BD:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl
X509v3 Authority Key Identifier:
keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.245.221.0-192.245.224.255
199.33.130.0-199.33.134.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:e4:54:8d:aa:21:76:e6:7d:97:77:14:ef:86:2e:8f:1c:18:
47:94:96:17:42:c7:11:5f:72:79:d6:8c:eb:62:f8:69:a6:97:
21:56:7c:6f:6d:3c:c5:d6:71:5c:4b:cf:49:b6:c3:5c:8a:0c:
bf:c8:af:9e:e0:d9:ef:42:db:a1:e2:9e:36:4d:d0:3f:24:12:
11:a8:a1:f6:85:4c:ff:1c:0e:ce:84:5a:f0:c1:8b:48:45:4c:
83:27:e0:35:04:55:21:62:73:69:a7:ef:e5:27:81:4e:bd:d3:
5e:97:6a:31:c4:d4:9e:eb:f9:bd:b3:ff:75:b7:b4:26:c9:40:
63:a8:61:04:f0:0f:81:ae:c2:0e:3e:cd:23:c6:ab:dd:17:52:
7d:35:3f:8a:11:4b:1e:7e:e6:d5:3f:cf:53:fa:83:13:76:63:
2e:bf:1c:3e:ad:cb:a2:43:d0:19:c1:98:43:3c:fd:cc:a5:cd:
b6:36:6c:50:e5:26:93:8f:8c:a8:52:ea:fe:25:8f:78:61:19:
23:31:d7:d9:0c:ed:c4:39:58:19:4b:fa:f4:80:2c:4f:57:1a:
7e:50:dd:f2:1e:40:8f:4a:5a:cc:35:cd:58:e8:d6:ab:9b:95:
96:e4:c0:f6:f8:68:dd:45:8a:7f:14:65:c4:c4:86:09:5c:18:
c1:4c:32:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:23:29 2025 by rpki-client