Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa
File: b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa (raw, json)
Hash identifier: Tmr3IpzU2h3bLgb+bMfL38bv7yfnJcMhwpMJhT9w3I0=
Subject key identifier: 93:9D:96:CE:82:4F:6F:B9:CC:3F:53:62:28:80:DE:3E:43:F8:B2:23
Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial: 010D0C9F432858491246B671CDD6535AA740B580
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 4476
IP address blocks: 192.68.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b6:71:cd:d6:53:5a:a7:40:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=80f6a9a9-8746-45c7-b3fd-7421b9f8ef43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:d5:48:50:b2:c3:74:b2:de:26:7e:75:c4:
6a:93:be:29:4e:d9:90:f7:b9:4e:60:7f:d2:4c:40:
9a:05:d6:cd:f9:03:f4:3e:55:e8:00:54:d3:b8:09:
b9:c4:c5:07:95:cf:26:ff:c2:b7:d7:a0:82:07:3e:
f4:fe:be:18:20:27:44:a3:19:f8:19:87:48:39:05:
3e:00:e4:12:9c:fe:7e:c6:08:61:86:49:fa:7b:26:
f9:78:d7:dd:27:ae:91:f9:27:6d:f6:23:d7:e4:f2:
bf:a3:53:95:b4:1c:68:4f:3e:9c:1f:0e:a7:19:18:
14:a6:16:c0:61:09:b9:06:f3:80:5d:d6:23:34:b2:
61:d8:bb:68:78:35:ca:99:5f:a0:a3:94:00:20:3f:
d4:7e:67:9d:e4:60:f6:34:50:0f:02:bb:bd:1b:6d:
75:1a:6b:5b:39:13:74:c7:80:22:40:70:40:14:22:
a8:cb:b5:f0:00:07:63:00:9a:72:8c:9a:ac:e9:67:
0a:67:16:84:38:39:d6:c6:a8:ee:c7:81:7f:f3:4f:
55:4a:b6:94:6e:d2:45:a5:5e:c1:05:a1:5d:27:0f:
e7:fb:43:ad:ff:1d:c3:7d:bd:f5:f6:8a:29:99:97:
df:de:f4:b2:4b:a9:72:a0:e8:97:de:89:ad:6e:64:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:96:CE:82:4F:6F:B9:CC:3F:53:62:28:80:DE:3E:43:F8:B2:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
X509v3 Authority Key Identifier:
keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:65:02:8e:cc:d9:ef:04:8c:fc:ec:a4:51:50:16:d3:1a:7f:
d4:79:f9:9d:5e:6f:82:53:89:7a:14:fc:d5:3c:9e:ca:d8:ad:
b1:3e:33:4b:af:50:80:a3:4d:71:3c:25:cd:73:ef:65:f7:92:
ce:72:7d:c1:70:13:13:2f:59:47:d2:42:5e:84:c7:48:a5:39:
45:fc:ca:86:4e:86:d3:8e:f9:57:c2:b0:a0:39:d8:1f:cc:70:
0e:ad:e8:55:48:77:c5:0e:f0:9f:a0:15:7c:d5:b3:a0:44:80:
6f:3e:26:38:6a:d2:7f:82:c1:c2:65:af:3e:9f:ee:f2:32:b8:
1e:71:ff:c5:cc:59:16:f0:6b:84:91:01:dc:84:8a:d8:6e:53:
38:03:8e:89:a1:dc:68:38:13:38:ce:aa:f3:c7:eb:d3:39:6f:
d0:6b:c5:29:03:97:33:b1:80:b9:22:d2:3c:c1:33:51:d7:e0:
4b:e9:02:ef:7c:7d:b5:51:86:5a:ea:a9:66:d3:20:d5:d2:f0:
d3:3a:90:c5:c4:6f:af:20:da:0d:36:79:9d:71:14:53:8e:04:
f2:bd:06:0b:c2:7b:7b:a0:da:a7:ee:c1:d9:f6:5f:c5:87:c3:
79:5b:02:e9:0d:95:6f:d8:87:48:6a:cd:b3:2e:47:a8:6d:e0:
60:91:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:07:11 2025 by rpki-client