Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/3a47a486-e559-3574-b85e-c1e51f9dfe02.roa
File: 3a47a486-e559-3574-b85e-c1e51f9dfe02.roa (raw, json)
Hash identifier: /zbJ0oZP+qegTIqt7wxtWW8Cmck5A2xug6S+vmhdZ/A=
Subject key identifier: 36:94:71:2B:9B:24:61:27:48:22:52:FE:47:49:91:B0:3A:23:50:AC
Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial: 010D0C9F43285848BE863362351AE128FC667E80
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/3a47a486-e559-3574-b85e-c1e51f9dfe02.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 0
IP address blocks: 192.124.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:33:62:35:1a:e1:28:fc:66:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=49736bf4-c7b6-4053-9eb0-691dcccc5e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:19:33:24:70:67:c7:28:86:7d:90:bd:59:
6e:5a:a9:22:7a:db:82:13:bf:90:ec:17:55:5e:95:
18:96:94:9f:2b:94:f8:e1:ab:fe:7d:42:ce:c3:57:
9d:d7:a2:dc:eb:e6:21:7c:ef:46:c8:96:b7:c6:19:
d9:34:5c:65:7f:93:23:13:48:1a:b9:87:6d:3b:aa:
28:0c:8c:21:e7:3d:ad:8b:33:42:c8:c8:d1:af:cc:
df:ab:e5:32:9c:f6:66:6a:0b:b7:00:63:05:08:fc:
19:7c:03:fe:37:db:aa:84:d5:8a:e9:52:a3:64:79:
95:07:0e:dc:df:0b:fb:8a:b2:16:0e:1f:8b:c0:92:
3a:3a:ed:33:79:8f:6c:3e:02:8f:28:2a:ce:e7:83:
25:c8:5c:6a:2d:0c:39:b7:70:dd:ae:e4:d9:03:f3:
85:2f:91:0c:aa:d6:42:76:84:b2:be:a2:07:9e:46:
83:cd:11:8e:22:e5:12:a2:e8:45:45:c4:b2:41:be:
4b:d9:f6:28:1f:21:88:da:bc:97:1b:a9:20:b6:14:
cb:cd:8c:d4:d8:16:fd:a7:11:94:52:75:f6:db:1a:
f5:f3:ba:e8:35:e3:27:f4:30:f6:ac:3d:ec:b4:13:
ce:69:8c:32:e4:aa:42:23:5e:b7:ec:cf:ff:98:49:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:71:2B:9B:24:61:27:48:22:52:FE:47:49:91:B0:3A:23:50:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/3a47a486-e559-3574-b85e-c1e51f9dfe02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
X509v3 Authority Key Identifier:
keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.124.50.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:a3:9e:c3:b8:fe:16:84:bd:91:ba:1d:74:cb:e5:5e:38:43:
56:0d:1f:09:ce:c3:55:d1:49:09:94:00:06:ee:21:16:83:9c:
63:aa:b8:87:12:62:32:24:e7:39:af:97:eb:7a:69:ba:a1:c4:
70:74:9b:0e:e7:8c:ab:58:51:80:03:2a:8e:d0:c9:2d:ab:70:
18:f5:db:af:2d:25:93:b5:f3:84:9b:37:be:fa:bc:6d:69:c9:
2f:7f:11:8c:98:ad:56:11:0a:4d:c3:28:3e:d6:0d:25:45:4d:
b6:bd:24:18:57:2c:75:d9:b5:29:7a:52:c5:1d:b5:f2:39:d1:
fa:4f:d8:36:3c:9b:12:75:3e:5b:aa:4e:ea:0e:9c:1c:4b:35:
1d:7a:ad:71:0b:e1:61:0a:ac:80:09:68:c3:48:40:e0:84:fa:
30:05:59:a1:9f:fc:ce:55:19:84:f0:d2:d1:fe:c1:97:94:9f:
28:e9:8c:fc:15:15:d4:23:66:39:1b:ca:34:38:cd:1e:c6:12:
66:62:0e:a3:af:e4:48:77:22:f1:56:75:40:64:46:d1:c0:58:
01:f5:b3:fb:75:7e:98:90:79:50:4a:0f:14:ee:24:9d:21:d4:
7e:1f:63:16:a4:7e:76:4b:a9:2c:b9:8c:12:8a:90:c0:d3:88:
80:db:0b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:28:48 2025 by rpki-client