Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/5e362ae3-25e5-3821-af30-e1b7bf668edb.roa
File: 5e362ae3-25e5-3821-af30-e1b7bf668edb.roa (raw, json)
Hash identifier: /MJ1Z8nace5LMNuNebLnY0QfQ17V+qnzep9bmlm6J7Q=
Subject key identifier: 82:B8:AA:D9:86:F5:60:AB:BB:96:DD:4D:8D:C5:7E:84:70:44:EB:AB
Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial: 010D0C9F43285848A1360CE1383F6EC01BB26480
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/5e362ae3-25e5-3821-af30-e1b7bf668edb.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 53766
IP address blocks: 192.40.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0c:e1:38:3f:6e:c0:1b:b2:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=4a24c329-0e52-44cc-a6f8-905bb74978a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:95:c9:8e:97:90:79:12:a1:8a:03:91:a1:
88:12:d4:fd:f2:52:8e:4b:69:e7:b2:7c:0e:ac:fa:
85:8c:7b:5d:c4:ab:7e:8d:3f:57:3b:37:53:40:e9:
db:b3:9a:8a:9a:cc:69:31:9d:14:73:d4:78:ca:f5:
2e:12:a6:1b:7e:af:bf:bb:73:48:cd:c8:f7:2d:99:
71:85:da:8b:8b:57:5d:17:05:5d:31:98:d9:fd:76:
2b:14:40:28:4c:9e:b9:09:4b:80:ac:e9:f2:c8:27:
c0:12:8d:07:18:b3:e2:a1:99:61:5d:4e:c2:13:35:
ac:ce:69:0d:1a:f6:2a:6c:60:7f:9a:c8:4d:f3:ad:
2c:c3:41:ee:4e:6e:f7:af:01:1f:2a:67:1a:5a:b9:
04:cb:86:66:52:d3:7e:11:4b:cd:30:27:20:6c:0e:
a6:7d:8c:94:0b:78:56:17:b4:c8:3f:eb:f0:57:29:
21:06:4d:11:ea:f8:51:9a:df:8d:5c:5d:16:29:09:
5b:fb:04:80:c3:fe:98:c0:0b:76:b7:13:e7:83:d5:
3c:14:d8:12:0b:6f:a6:da:fb:66:2f:35:6e:90:cc:
e8:81:e0:a1:79:a9:6d:af:90:19:e0:ea:e0:82:3e:
f0:24:51:b1:46:0d:27:4c:be:1a:1e:97:f8:d9:f8:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B8:AA:D9:86:F5:60:AB:BB:96:DD:4D:8D:C5:7E:84:70:44:EB:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/5e362ae3-25e5-3821-af30-e1b7bf668edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
X509v3 Authority Key Identifier:
keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
sbgp-ipAddrBlock: critical
IPv4:
192.40.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:b6:18:68:e6:ca:dc:1e:18:12:61:8f:11:3a:77:7c:53:d3:
64:c5:39:a8:4a:98:85:78:07:ae:39:a3:38:48:1a:08:3c:e3:
87:63:89:3f:fb:7c:30:3b:bf:9a:87:07:7e:89:e2:31:40:3a:
05:ef:f4:1a:05:5b:c8:f6:30:ae:ce:2b:8e:29:25:ad:10:5b:
02:d2:d6:dd:37:90:fd:e4:d2:20:c4:24:08:08:27:b5:90:b7:
67:b5:91:0c:4f:01:0c:da:97:60:d6:4a:34:3f:8f:01:7b:d5:
11:71:f9:31:dd:89:ea:8a:fc:00:7f:14:51:ed:cf:45:28:7f:
88:4d:1e:81:dc:80:19:6b:23:6b:5c:16:1d:5f:7d:24:82:54:
5f:bb:4f:45:9d:61:5d:92:56:0f:7b:31:93:b4:65:7d:7b:e3:
8d:e2:d2:da:8b:62:eb:80:74:39:05:d5:04:6e:1e:68:2e:4b:
47:fd:2e:ce:3a:80:d7:ab:78:bf:a9:4b:ad:45:bd:ad:d1:9e:
bd:25:a1:08:df:5f:8c:95:4c:64:13:46:38:5c:2d:3c:e8:94:
38:3f:d2:44:7d:59:a0:ba:b4:13:8e:57:3a:fe:93:9c:ee:dc:
ca:9b:33:34:6f:ef:ad:60:1a:e3:26:54:10:bb:37:82:2e:c5:
00:aa:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:34:10 2025 by rpki-client