Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa
File: fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa (raw, json)
Hash identifier: VenoPeFsfLJwJCec5rZ2qCXSTydE+1lf4uCS1ejYBeE=
Subject key identifier: 68:5D:D2:B4:F1:2C:5D:56:BE:B1:DA:76:DF:80:F2:82:19:1C:26:F3
Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945
Certificate serial: 010D0C9F432858490E16CAEC5D117077BEB1F7C0
Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 192.28.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:ca:ec:5d:11:70:77:be:b1:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=c974fbb8-ea03-4b7f-9382-d3f52ebaac67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:a5:20:85:c9:7e:cc:98:f8:c0:85:e5:1d:
ba:ca:51:6f:f8:c6:53:95:20:cd:51:80:c6:54:1f:
e4:d4:66:f2:74:cd:32:3a:a7:07:d5:c8:ab:1b:d7:
5d:d4:b9:98:e0:e6:79:22:4c:13:31:d0:d5:1e:9f:
6e:f1:22:d6:d2:61:18:a8:d5:8c:5e:c4:2c:ad:a5:
eb:c1:17:9b:af:22:03:00:ea:ff:60:5f:a9:e3:7d:
a5:fc:ee:29:6c:74:a2:ca:fc:ca:d9:78:0a:1f:0b:
8a:34:78:08:9a:83:43:c7:36:fc:b1:ef:c2:2b:80:
4e:9a:a4:a0:40:d8:be:a2:02:9b:92:e8:8d:78:fc:
5a:f5:de:ec:48:2f:61:b5:ab:3d:89:25:72:8d:80:
35:a1:2e:8e:20:16:ce:5c:32:af:aa:70:09:91:73:
5e:8e:c9:02:57:90:cd:76:ed:a8:33:a3:57:27:bc:
ca:f7:db:8d:e1:fa:43:8b:02:2a:77:31:ce:5b:17:
2b:fa:53:c3:44:b5:a5:b6:be:f2:47:0d:9b:d0:86:
b3:dd:cd:30:28:37:92:fb:5d:ec:09:eb:0d:34:b8:
e2:10:07:a5:ba:53:78:58:97:21:ab:5a:d8:82:e0:
c8:68:c7:b6:36:95:bd:a6:8e:7f:6c:57:18:b9:71:
1b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:D2:B4:F1:2C:5D:56:BE:B1:DA:76:DF:80:F2:82:19:1C:26:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl
X509v3 Authority Key Identifier:
keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.28.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:b9:01:40:69:cd:ad:a3:24:54:c7:20:84:4a:ce:0a:91:c6:
d3:74:9f:f6:13:92:7c:ec:e5:c1:b1:d8:09:82:f0:7f:dc:57:
d3:bd:f7:a9:75:45:57:cf:a8:68:f8:46:e3:53:20:06:47:47:
72:dd:a3:95:9f:8b:6f:06:e3:59:a1:0c:a7:d4:70:d2:cd:00:
e5:80:ed:65:fc:b2:bd:ed:57:12:dd:37:c4:a4:3d:e3:53:c8:
39:83:14:db:09:0b:21:d9:ec:b9:4b:1d:29:e3:d9:27:21:de:
99:68:92:07:90:1a:94:de:1f:38:ec:6e:45:1f:c9:56:c8:36:
f9:d7:d2:a4:26:c5:81:00:f8:df:1a:4a:20:60:b7:e2:78:8e:
7b:ef:73:90:5f:a0:2f:f4:47:22:53:de:05:eb:99:b8:84:8f:
6a:67:77:d6:ee:f2:c9:28:45:0a:3a:fa:25:86:7d:af:52:c0:
3a:c1:9d:1c:5f:e0:32:72:e1:31:31:97:de:d1:97:4d:b1:50:
47:d6:65:98:83:c2:23:f4:2f:73:d7:80:6d:0b:fd:39:93:cd:
cc:2e:8e:19:f3:3e:3b:0d:98:ad:98:8f:83:d1:17:94:d4:f0:
da:7f:92:13:f6:e1:fb:b1:0d:27:5d:e8:d5:07:34:85:47:40:
a3:6f:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:48 2025 by rpki-client