Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/c983cc60-905c-3da5-9db4-c626bb313add.roa
File: c983cc60-905c-3da5-9db4-c626bb313add.roa (raw, json)
Hash identifier: r2kJAHlEAbXOm9bZwoisWSSp37stap8jY67r37XgT7o=
Subject key identifier: D7:63:2B:86:22:DC:F8:CB:55:D7:EA:05:37:27:47:13:A6:F0:4D:A9
Certificate issuer: /CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Certificate serial: 010D0C9F4328584944692E67D9EAF05248B61E40
Authority key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/c983cc60-905c-3da5-9db4-c626bb313add.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 394298
IP address blocks: 192.234.88.0/24 maxlen: 24
203.89.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:2e:67:d9:ea:f0:52:48:b6:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=3fcfa3bd-f713-4247-8780-43b6c9a8fbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5f:76:96:49:84:c0:68:b1:52:ad:a1:67:1e:
99:4b:63:22:80:23:92:0e:b3:b8:8b:c7:c4:53:1b:
a4:79:d6:9f:db:6b:dd:d6:f0:0b:47:2d:0c:d3:05:
31:9e:f7:4f:8b:77:ea:16:5d:3f:56:66:31:50:81:
7f:b4:52:47:6c:e5:08:44:98:6f:a5:de:25:9f:38:
ab:24:e9:58:d0:6f:12:8b:7a:85:6a:8f:54:ee:09:
25:0b:c1:e7:29:c1:d8:54:d9:d8:de:d4:12:4c:8b:
7c:c0:80:85:97:5e:c5:f4:27:53:e4:a5:1d:85:20:
71:8c:a5:8b:5a:32:f9:d6:fa:d8:5b:f5:45:97:ea:
fc:d4:7c:20:a3:70:47:94:c3:4e:9d:3a:33:3f:f4:
42:75:35:14:da:c0:0e:d0:a8:f4:67:9e:5f:8b:bb:
c8:f8:a4:3a:3b:cd:53:bb:dd:38:26:e8:3b:03:9f:
b2:af:4a:86:48:18:fc:44:7e:17:3a:d5:78:da:93:
b3:35:94:10:04:7f:68:12:c7:52:89:8d:5f:89:10:
fb:92:c3:d8:58:2a:2e:36:fd:b0:31:ed:94:c8:a5:
f4:33:38:0f:96:c3:b0:33:ee:56:64:5b:36:69:e8:
0d:8f:b2:a0:f4:2d:6b:c9:37:db:23:44:c5:5d:65:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:63:2B:86:22:DC:F8:CB:55:D7:EA:05:37:27:47:13:A6:F0:4D:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/c983cc60-905c-3da5-9db4-c626bb313add.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl
X509v3 Authority Key Identifier:
keyid:1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
sbgp-ipAddrBlock: critical
IPv4:
192.234.88.0/24
203.89.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:79:fc:cd:cd:02:ea:fe:64:a7:50:e2:f1:63:d6:1f:35:25:
cf:c4:f7:1b:37:15:c2:73:69:8f:51:68:22:09:2b:9c:86:58:
e0:17:08:92:81:79:8c:7a:ce:76:bd:56:95:34:5e:c7:36:fc:
f7:a3:4b:53:ac:5a:a4:a2:9b:f2:b0:a7:04:04:5d:a2:6e:22:
ab:37:e3:47:41:57:e2:85:2f:1f:34:f2:43:22:3e:17:5e:da:
ba:09:b2:1f:73:5d:89:5b:6e:12:dc:0c:d6:95:c8:c4:6d:1a:
49:dc:47:59:f2:00:9e:a0:e9:10:19:2d:85:58:0a:c3:83:06:
48:5e:8a:e3:ef:f3:25:48:19:6f:b9:38:14:e4:57:d6:4a:ac:
a5:08:d8:48:16:6d:4b:d7:51:e6:00:ae:ca:4f:68:d1:0a:41:
45:a3:27:2e:65:94:1d:e3:b3:a5:e1:c0:b6:13:74:d1:a5:a1:
1d:ee:5e:9e:9d:0d:f9:3c:91:14:ca:96:75:bc:cd:c8:28:54:
ed:19:09:94:ea:1b:da:fd:8c:6a:78:8a:6d:fc:aa:8c:30:40:
40:3d:0e:79:3b:96:56:1a:2c:2a:47:36:5f:22:b2:3f:88:f8:
aa:2e:a4:9c:1b:02:76:82:af:69:67:54:b5:ff:76:a5:6c:1e:
bf:77:a0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:17 2025 by rpki-client