Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/5ac2a8ae-46fd-3845-bc8c-dff57495fb63.roa
File: 5ac2a8ae-46fd-3845-bc8c-dff57495fb63.roa (raw, json)
Hash identifier: ilTy7PKM+HzyLGsrXL9C0wUkIHvewZQpEeC8Hkn+A2U=
Subject key identifier: D0:31:07:15:C1:20:5C:14:F0:B9:4A:B3:1E:87:BF:0C:91:9F:29:06
Certificate issuer: /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial: 010D0C9F43285849002166DFEE6E967180C04700
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/5ac2a8ae-46fd-3845-bc8c-dff57495fb63.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 5719
IP address blocks: 192.42.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:66:df:ee:6e:96:71:80:c0:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=6fe82916-a776-4b24-8236-0c2c66ed2d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:85:3c:1d:13:97:1f:1a:75:80:0c:75:e8:a6:
ef:a3:00:96:c2:fd:4f:4e:91:2e:30:38:f1:a6:8e:
52:33:21:fd:d9:d1:a7:53:52:45:72:9f:14:2f:9b:
9f:27:14:4e:1f:8c:84:69:45:e1:8f:e5:37:4f:45:
a2:1f:e1:67:5e:82:49:ae:f1:89:b2:d9:c0:57:91:
08:bf:41:a3:d5:e3:13:c2:02:2d:21:8a:89:e9:37:
21:5a:b4:2e:fa:0f:00:ff:ae:18:2e:7f:95:28:ab:
7d:67:5d:52:f6:63:b9:c6:56:0b:a7:e9:ea:f4:fa:
02:e3:23:aa:23:49:c2:12:38:c8:61:a3:c9:83:96:
f4:8e:a3:28:8a:ed:2b:c4:e9:41:4a:3a:d9:d3:fd:
ca:98:24:13:47:d1:46:28:0f:16:2c:fa:ad:38:f6:
fa:94:03:06:d8:ef:8b:17:f5:48:af:b4:b0:7d:92:
f9:8a:68:a7:c7:83:ec:dc:13:e3:01:00:6a:52:8b:
4c:ac:a0:9a:3d:66:e5:69:90:ef:0f:40:8c:54:82:
21:2c:c0:7d:a0:e6:4e:24:f7:bd:80:de:c0:be:18:
59:24:d7:cc:64:0c:2d:11:5a:8d:67:9e:7a:e9:cc:
2e:ed:9b:06:35:15:bc:01:de:fa:0c:90:06:7b:56:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:07:15:C1:20:5C:14:F0:B9:4A:B3:1E:87:BF:0C:91:9F:29:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/5ac2a8ae-46fd-3845-bc8c-dff57495fb63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
X509v3 Authority Key Identifier:
keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:af:ea:ac:23:a5:fb:1b:df:5f:72:f4:f8:16:5e:ec:3a:c2:
3f:16:5f:70:84:9a:47:66:5d:05:0b:4a:4c:1c:91:5e:b8:0a:
41:0f:d6:b7:1e:27:f8:48:d5:23:c2:2c:d6:0a:84:ba:3a:a0:
06:8f:0c:2e:a8:14:3c:ad:99:99:f8:8d:71:c1:50:d0:c4:3c:
ad:80:9b:e2:40:1a:8e:6b:aa:af:c8:a8:e3:50:de:18:75:48:
62:db:a8:78:fa:dc:43:74:85:e0:93:6f:58:2d:62:36:20:3a:
0b:d6:bb:71:bd:5c:ed:67:eb:f5:c9:87:d9:28:73:20:d5:7c:
a1:45:e5:42:83:05:a0:cc:bb:4a:51:00:07:eb:b9:fd:00:cc:
5b:42:e1:be:13:36:6f:7a:4f:39:72:62:ef:06:96:5f:15:62:
a8:bf:d5:98:dd:16:0a:55:ee:36:1f:40:b7:5f:cc:7e:9b:a7:
ac:d8:44:63:9e:21:91:bf:84:bb:72:b1:74:40:f7:1a:89:24:
c7:8c:c2:5a:c9:50:d6:a8:48:90:7f:f7:30:84:77:66:29:9c:
4d:68:fa:f9:7d:a8:81:c5:75:9a:32:af:d2:af:a3:c8:6d:1f:
99:c6:70:eb:53:15:78:12:b0:f2:e1:1f:6c:8c:f8:83:36:4a:
9d:5f:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:58 2025 by rpki-client