Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
File: 6f6c6da7-938f-331f-aa19-5573ef780ea3.roa (raw, json)
Hash identifier: GWp+6wcRFuQtNiwC/XwsC56ZRNkrO1GWNnYqEfFIQi4=
Subject key identifier: C9:C4:37:1D:C8:C3:90:CA:AB:3F:E2:B4:7A:21:8E:C9:C6:38:60:14
Certificate issuer: /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial: 010D0C9F43285848DD3BAC39DE6CB7800D53C600
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 397913
IP address blocks: 192.148.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:ac:39:de:6c:b7:80:0d:53:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=c3231791-841a-41f2-bda3-c113cb6b28c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:62:db:c2:39:4f:f3:1f:84:fc:e7:f2:99:8a:
f7:89:a0:06:25:03:1f:e1:ee:08:f0:3b:10:bd:dd:
35:b7:8e:18:28:a8:45:16:04:b0:ad:2a:1d:69:e1:
7a:73:5f:b3:47:82:a7:24:c7:4b:5d:40:e6:8c:c6:
3f:a2:7c:f3:7b:0e:e5:9f:40:4b:87:24:a0:d8:92:
7b:4d:10:33:3f:f0:af:68:83:b9:7d:87:ba:4d:4b:
eb:d4:45:1c:7e:0d:46:d7:60:c6:0d:40:2d:2b:96:
74:82:89:1c:03:d0:37:8c:83:4b:36:cb:a6:b0:87:
86:c1:37:6f:a9:ab:7a:08:3e:6c:0f:62:46:b9:1a:
5a:a5:67:8c:84:c7:45:23:25:3a:d9:8f:1a:44:8e:
8b:1b:6e:b9:d7:c2:97:c2:76:20:03:b7:eb:b4:b6:
38:d8:dd:4a:91:ed:f4:b4:a1:67:b1:87:32:96:f7:
d2:43:ce:da:06:a5:e1:e2:ea:78:53:c5:60:46:ff:
f8:70:10:8d:66:b3:42:47:c4:59:4e:59:94:f8:13:
77:83:90:43:fc:b7:ca:46:53:b1:34:53:c1:84:1e:
43:32:39:d0:b2:2d:6f:59:b4:54:5d:b7:41:c2:9f:
19:ea:f1:fd:b7:91:97:4b:9f:4f:5c:bf:f4:bd:e3:
63:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C4:37:1D:C8:C3:90:CA:AB:3F:E2:B4:7A:21:8E:C9:C6:38:60:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl
X509v3 Authority Key Identifier:
keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.148.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ec:42:3c:fa:1b:ce:31:a5:ab:70:63:1c:89:24:e5:a9:a2:
ff:ce:58:74:aa:c8:e1:91:4a:fa:bc:6b:71:a5:d5:fa:72:2e:
5e:5d:d2:a7:f5:b4:f9:8a:32:17:8f:ca:6a:b0:73:ad:9d:db:
fc:80:13:2a:bc:34:8f:47:cd:97:1c:fe:a2:2e:d2:22:51:cc:
e7:88:f6:2a:2a:e1:7d:62:36:cf:98:17:18:01:4b:7f:5e:c2:
5b:b9:e3:3b:28:b9:a8:b2:6f:8a:33:1e:0d:74:b5:9b:dc:2e:
90:ea:41:bd:20:bb:b3:e1:7b:ac:e6:5a:6e:00:a7:51:f9:7e:
40:77:2a:65:4a:7d:d3:9f:5c:51:04:fd:de:50:b5:35:07:66:
4a:53:d4:69:77:13:57:96:f8:2d:54:0a:d7:5e:ea:6c:0d:60:
d3:f2:df:fe:a5:ea:8a:0e:ad:3b:89:4f:b7:04:f1:af:4f:47:
32:d2:e2:1a:f6:f0:58:39:ca:ae:10:57:0c:98:07:83:ba:07:
2b:13:47:6a:6a:5f:3a:54:33:44:e5:14:e5:6e:71:75:c3:28:
3c:a5:19:36:d4:c4:22:81:19:a3:ca:a5:c6:56:ba:02:ee:4a:
2f:09:04:57:2d:ec:7f:04:6f:72:3d:0c:de:9f:02:32:01:be:
4f:1a:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:01 2025 by rpki-client