Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/c1c676f0-87d5-3be9-aa2c-3d3e29b5dd2d.roa
File: c1c676f0-87d5-3be9-aa2c-3d3e29b5dd2d.roa (raw, json)
Hash identifier: b0nQibSEGLHEvpkPo2M+bpBvP6GCS2u/EBjAVk0V9R8=
Subject key identifier: EA:C9:5D:08:C2:39:73:3F:ED:E1:30:C0:3E:31:24:D4:A3:76:E2:A6
Certificate issuer: /CN=e4e79c76-1a66-4449-a2b2-acc3c7eee9ab
Certificate serial: 010D0C9F432858493C092FA19D8F7C8242708900
Authority key identifier: F3:74:EC:C0:46:EC:23:1A:2A:E1:0E:EC:4C:C7:D2:B3:D6:3D:6C:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/c1c676f0-87d5-3be9-aa2c-3d3e29b5dd2d.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 40119
IP address blocks: 192.197.128.0/24 maxlen: 24
199.185.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:2f:a1:9d:8f:7c:82:42:70:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e79c76-1a66-4449-a2b2-acc3c7eee9ab
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=82311054-8fed-46a8-8f69-a5d799b27dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:e2:b2:ed:12:ad:f2:36:71:76:5d:c1:f2:
50:2e:89:f1:6d:60:ae:ba:b1:b5:15:22:92:d7:c3:
9a:fb:8e:d1:15:eb:54:d9:4e:5d:61:12:3d:73:6d:
b1:84:5d:27:32:06:13:69:f1:f8:99:0c:9f:fd:37:
25:b9:d2:a5:0c:ab:8f:ac:69:28:f1:8d:78:9e:8e:
a2:db:3a:e8:6d:0d:c2:6c:bf:cf:33:4b:db:2d:fd:
48:36:27:0f:1e:92:33:e6:80:c9:3e:5e:43:c0:7e:
63:88:a0:22:03:93:73:a3:73:cd:22:08:ad:26:42:
dd:35:08:5f:13:20:58:5d:bf:af:f5:70:bf:ac:62:
12:39:aa:5a:a3:db:fe:33:ec:4f:d1:7f:d0:11:7c:
94:63:d8:f1:55:a1:79:c9:f1:7f:d5:bd:d4:d0:4b:
3f:ee:83:9d:e7:12:70:a0:eb:0b:2c:7a:6c:88:5f:
24:7c:1b:b9:4b:bf:b6:6f:4d:ed:a4:30:2e:08:38:
d9:4c:91:d4:70:05:1b:0c:de:65:97:95:11:14:39:
df:69:00:35:75:c1:93:a3:da:b9:30:60:7f:f5:71:
56:77:c1:d2:dc:74:59:56:d6:f6:08:c5:2d:1d:fd:
5b:54:60:0e:f0:74:7c:91:3c:58:4f:27:52:14:8a:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C9:5D:08:C2:39:73:3F:ED:E1:30:C0:3E:31:24:D4:A3:76:E2:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/c1c676f0-87d5-3be9-aa2c-3d3e29b5dd2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.crl
X509v3 Authority Key Identifier:
keyid:F3:74:EC:C0:46:EC:23:1A:2A:E1:0E:EC:4C:C7:D2:B3:D6:3D:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.128.0/24
199.185.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:fb:a4:dc:9b:d5:60:a1:50:9e:c0:14:5f:f0:d1:43:ee:ea:
cd:7c:18:1e:30:26:6f:83:20:36:19:7a:46:7c:34:f2:7f:5d:
22:4b:3f:e3:5e:45:4f:d2:ae:2a:23:2e:05:98:32:e6:44:d7:
ff:c7:06:71:76:22:e2:7b:59:25:f9:7e:82:7d:0a:73:09:e0:
37:02:9f:d0:a5:ca:cc:b0:8b:de:42:3a:6e:3a:cf:f8:08:95:
46:15:c2:49:98:d5:e6:63:6b:68:3c:6a:74:3b:e7:a8:a9:68:
16:dd:43:59:80:6e:d3:c7:45:5b:34:a6:de:82:b3:de:26:52:
3f:35:e5:e4:fd:c0:8d:e1:98:1c:b3:92:56:51:7d:75:69:01:
fc:7e:27:4c:fd:f3:9f:53:2d:b1:4c:7f:ee:1f:92:29:38:5a:
e4:a1:8f:b7:3a:c7:82:53:09:da:e3:94:ff:48:ce:13:33:8c:
ba:af:9b:cb:bb:9a:14:0c:98:76:33:56:83:26:43:bb:4a:ea:
e4:35:df:96:6a:56:ca:af:45:b5:48:db:f1:24:b2:64:d8:df:
d8:71:a2:56:29:25:9e:34:7a:61:9a:f7:50:2a:c6:65:f4:fe:
09:0f:ee:e4:7e:b0:34:5c:df:22:76:21:0f:93:41:c8:bb:58:
96:7b:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:34 2025 by rpki-client