Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa
File: afcd93bd-2515-3100-bccc-fb4b5902b55e.roa (raw, json)
Hash identifier: kInOBQBFZTdAZa8P1184SFI644CmZTXayA40OQMHMsc=
Subject key identifier: C4:D9:70:7B:85:01:87:72:F7:5E:CE:44:AC:AF:81:E6:9C:E4:E0:5F
Certificate issuer: /CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
Certificate serial: 010D0C9F432858494CC948C6CDA66C7D58D876C0
Authority key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 271
IP address blocks: 192.197.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:48:c6:cd:a6:6c:7d:58:d8:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=6dfb4252-4674-4f91-bede-69de0a6ca68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:53:3a:3a:17:7b:b9:b0:01:a6:62:4e:ec:
64:bd:d3:73:8f:7e:82:c3:68:3d:76:c9:ef:66:1c:
e6:e5:02:92:ae:ce:32:e8:86:9c:e1:78:c7:42:ef:
4f:a4:ae:57:6c:b7:04:fd:9f:0f:36:b3:c3:c6:6c:
ef:4a:87:d6:ee:16:14:9f:81:4e:ea:8e:e0:1d:33:
5e:0f:84:72:55:d7:60:b0:09:71:a7:0b:be:d2:f3:
a4:52:92:84:6d:8d:87:06:20:d9:56:3a:93:2b:e6:
98:28:8b:2b:bb:4d:6c:bf:5b:cd:c8:bb:af:51:6f:
9c:dd:11:7c:4f:08:4d:5e:6e:88:51:5b:0f:33:d8:
a5:0b:7a:6c:91:b8:d9:3d:89:8d:7c:b2:0f:04:d0:
95:59:6d:dd:7f:46:34:95:68:90:d3:a4:39:70:af:
2b:e7:78:64:65:25:f6:1d:a0:4d:8b:48:3f:2b:7a:
6f:39:a9:ac:17:84:17:10:6b:5f:71:c0:2a:a7:e1:
ff:b0:3a:2b:f6:40:ed:b8:47:9a:6a:0b:31:44:fa:
6c:81:39:8a:a2:f3:0c:fc:9b:03:53:b7:cb:3f:fd:
2d:94:d0:9c:71:c5:f5:35:50:d7:a6:ed:3e:be:1e:
59:33:40:cf:dc:8a:3e:ac:4b:6d:28:50:3c:a1:ad:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:70:7B:85:01:87:72:F7:5E:CE:44:AC:AF:81:E6:9C:E4:E0:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl
X509v3 Authority Key Identifier:
keyid:BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:d7:b8:c2:3c:19:f9:40:3f:44:86:b7:da:b4:f6:49:5a:3b:
99:e2:ab:97:34:b5:71:02:53:c8:b1:0c:a8:da:b3:d9:12:3e:
7d:d9:c3:3d:7e:28:a8:14:9c:0a:c4:c2:3a:2a:6b:4e:f0:28:
f7:b8:23:e8:a4:be:05:2d:98:09:d0:00:9b:e2:ba:c9:51:98:
f3:54:c2:45:86:76:c5:85:37:eb:d4:78:4d:d5:43:2f:19:eb:
2a:1b:f0:41:69:a7:5b:05:f3:63:23:87:65:bb:8c:74:d0:e7:
3a:7c:69:a1:68:3a:71:8a:2a:40:18:8f:ea:85:25:d1:23:f7:
e9:1d:b1:e9:04:9e:b1:71:b0:40:17:2d:b2:24:c3:43:db:9f:
b2:9e:9e:6a:00:f6:1a:d6:75:6d:80:e9:11:f0:fc:0e:06:06:
3f:aa:3d:fe:f3:65:ac:fa:6d:12:4e:f1:d6:19:87:3d:f2:6a:
2e:d6:1c:3b:3c:10:2f:61:ef:0c:2f:05:97:d4:f0:65:e1:f3:
c9:67:a3:66:54:5f:04:3b:01:e9:a5:40:dc:81:a9:f2:fd:02:
49:45:50:54:8b:68:61:b0:a2:d2:34:55:de:87:06:35:87:a1:
dc:de:42:34:de:80:87:b2:6b:26:f2:5b:a9:cf:41:b2:55:33:
c7:96:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:18 2025 by rpki-client