Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa
File: 5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa (raw, json)
Hash identifier: SLtQrVw3ppJaONO4h45aCdeknn0eqBsdlaRjDWraF2k=
Subject key identifier: 21:77:48:34:C7:CB:25:15:29:08:8F:80:0F:E4:F8:AD:1B:2A:6C:7D
Certificate issuer: /CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd
Certificate serial: 010D0C9F4328584909E6A431CC615AA96E7C8000
Authority key identifier: 04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 376
IP address blocks: 192.197.51.0/24 maxlen: 24
205.236.8.0/24 maxlen: 24
205.236.9.0/24 maxlen: 24
205.236.10.0/24 maxlen: 24
205.236.11.0/24 maxlen: 24
205.236.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a4:31:cc:61:5a:a9:6e:7c:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=4c7ed476-b0f6-474a-a624-32614564bd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:de:63:d6:4c:8b:6c:d5:89:39:42:f6:2a:
87:3b:d4:70:ac:2a:d5:e8:85:53:26:27:31:ba:4f:
dc:68:b4:f5:da:c1:a4:73:1b:5b:ee:86:b4:a2:69:
d1:8e:77:38:75:54:69:97:7a:98:07:22:02:60:f9:
5a:9b:1d:28:d5:b8:52:31:6f:64:bb:8c:37:bd:a9:
eb:09:6b:f0:85:14:83:98:9f:a4:47:39:c3:a0:ad:
8c:7c:87:54:04:6b:e7:a2:c4:b4:75:a6:8a:25:88:
39:a6:a2:6d:fe:2c:35:2a:a7:db:a3:8a:96:fb:fa:
f6:bc:07:74:b3:bc:a1:c9:54:e5:5e:69:e7:d9:af:
56:f6:cb:cc:40:02:99:1e:1e:d4:d5:54:f3:15:37:
fd:5e:4a:0f:4a:86:70:40:32:1d:bf:c9:5a:db:ee:
de:31:56:1d:23:36:8d:3a:3b:5d:d4:c5:93:4a:69:
83:8a:fe:0d:db:64:e5:04:1b:96:af:ed:19:44:69:
8e:87:1b:c6:cf:e2:2e:03:bb:83:5a:15:3e:df:d0:
98:d8:23:f1:f6:1b:e2:46:2f:4f:a5:99:61:40:01:
cf:0b:61:39:ea:93:d1:32:09:ff:48:70:e7:24:1e:
10:54:02:d0:ed:ea:ee:4a:00:47:0b:bd:12:ca:e4:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:48:34:C7:CB:25:15:29:08:8F:80:0F:E4:F8:AD:1B:2A:6C:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl
X509v3 Authority Key Identifier:
keyid:04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.51.0/24
205.236.8.0-205.236.12.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:91:e5:44:6d:01:a7:78:ed:19:18:c6:82:ed:e9:aa:75:af:
f4:bd:8f:6e:1b:0c:14:35:e8:37:cb:e3:a1:3f:16:e7:2b:71:
11:45:1a:5b:14:07:fa:e3:22:ec:c1:3f:34:1b:9a:59:43:9a:
92:d2:2c:5c:3d:f5:f5:35:5a:35:1e:25:7f:66:95:df:1c:74:
70:45:b1:fb:89:00:3d:5c:a9:72:81:e0:9b:fa:01:e5:26:2e:
5b:b0:a1:bc:3d:70:b1:10:d7:7f:77:e4:ae:43:06:32:cf:9e:
89:b3:90:9e:4c:82:8d:00:5c:52:a7:c8:42:a7:89:e6:48:2f:
39:e2:06:68:55:a2:07:3c:17:6f:58:6a:44:64:86:4a:e4:0f:
fd:d4:7f:dd:40:a5:b4:c9:5d:3c:ec:65:ef:0c:c5:51:42:4b:
3d:88:43:94:34:fc:79:5d:1b:82:24:fd:97:1c:1e:6d:d4:89:
cd:9d:41:6d:e2:8c:19:2c:66:54:0e:e5:98:96:38:e5:88:f4:
11:70:47:ab:54:38:20:47:a2:a9:c0:a1:4b:75:d6:fb:57:5b:
cf:27:ac:10:ef:96:a8:81:94:0c:2b:ce:0e:7c:04:6f:b4:c8:
f1:d0:81:79:51:02:4f:93:54:69:7c:c6:fc:ba:9a:0d:06:45:
55:c7:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:35 2025 by rpki-client