Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e/e98def03-3c38-3362-b59b-1a7cb6ea8a00.roa
File: e98def03-3c38-3362-b59b-1a7cb6ea8a00.roa (raw, json)
Hash identifier: LtiLq8+X71IQ19LYach0/mz/zjdcYvOi3wNMWaL7l3A=
Subject key identifier: 9D:3E:95:B6:69:D8:CD:10:C4:96:05:84:12:E1:71:F5:6F:49:80:22
Certificate issuer: /CN=edf51793-87f2-4529-9445-f4d5f104573e
Certificate serial: 010D0C9F43285848F9267913D0263AF02BE03C00
Authority key identifier: 7D:8B:C5:C2:D7:06:D4:1F:57:61:78:48:11:6F:D3:55:0F:E8:AA:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e/e98def03-3c38-3362-b59b-1a7cb6ea8a00.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 216030
IP address blocks: 192.157.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:79:13:d0:26:3a:f0:2b:e0:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf51793-87f2-4529-9445-f4d5f104573e
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=c3b8cc5b-d32d-46e0-b89a-0dd194bead1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:aa:88:8d:ca:ec:19:6b:8e:f2:7f:57:6b:
e7:76:b2:7a:4c:30:10:fa:c3:24:aa:fd:5c:5f:5e:
a3:47:44:45:74:78:72:b6:42:a0:85:3d:21:e8:b0:
06:cc:47:27:a9:8f:51:2f:82:6c:5c:9c:a3:84:2e:
2f:49:fb:c0:ba:55:00:07:66:c2:13:43:0e:6d:e1:
e3:c2:e8:56:bf:15:bd:6e:1b:d6:ad:25:cf:5a:ed:
f9:91:64:c0:66:a3:9a:3c:ce:c2:3c:f5:f0:c0:7e:
cb:a4:84:27:dd:e9:c9:da:ab:62:23:05:b5:88:da:
fc:17:2f:9b:b4:21:09:6f:b4:4c:13:2d:d2:ae:80:
0b:59:6e:ce:54:81:c6:aa:db:a4:01:2b:7a:c9:95:
7c:8b:a4:9d:41:fe:33:ff:c3:1c:33:e6:52:18:c8:
74:69:d7:c6:70:1f:1f:7d:ed:41:43:9d:18:45:93:
b2:ac:c2:be:5f:03:db:46:fc:6e:d3:fc:cd:ea:0b:
ba:42:9c:32:96:a6:ce:7d:c0:11:10:3e:d6:61:5f:
c1:63:85:80:0b:31:f6:3e:0a:38:db:58:d6:a7:10:
a5:d7:fa:9d:87:74:5f:c6:36:76:9e:c9:b4:b6:a6:
4c:2d:9d:b2:ca:20:47:03:d7:d5:f2:3e:81:76:0b:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3E:95:B6:69:D8:CD:10:C4:96:05:84:12:E1:71:F5:6F:49:80:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e/e98def03-3c38-3362-b59b-1a7cb6ea8a00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e/edf51793-87f2-4529-9445-f4d5f104573e.crl
X509v3 Authority Key Identifier:
keyid:7D:8B:C5:C2:D7:06:D4:1F:57:61:78:48:11:6F:D3:55:0F:E8:AA:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edf51793-87f2-4529-9445-f4d5f104573e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:bc:2b:33:e5:50:21:3f:76:d9:69:81:ce:01:cb:ab:77:69:
a1:94:03:fb:1e:09:21:21:7f:ff:6f:2f:1d:ca:25:e4:cd:ed:
5f:38:ef:0b:dd:57:b4:f2:6a:eb:a1:a3:d1:de:84:cf:25:3d:
0b:84:de:6f:c5:3a:1a:a0:c5:88:f4:0c:07:9d:17:9e:d7:56:
6e:7b:a8:79:dc:b9:14:76:b1:80:e3:41:0f:3b:ab:1a:61:5b:
aa:c1:91:1d:30:ab:d2:f2:34:5e:08:73:80:97:9e:59:5f:e4:
00:e3:d2:85:71:96:fb:d6:cd:e8:17:b2:ae:a6:e1:42:ce:8d:
1f:45:85:14:b7:1e:09:43:4c:00:78:70:70:0e:57:42:de:55:
e0:1b:7b:82:8f:ab:6e:7c:41:52:1f:4a:fe:14:23:da:fe:76:
30:d3:b9:e1:13:8b:5b:21:ea:f8:65:d5:eb:20:d4:4a:8e:86:
9d:1b:9d:f6:41:d3:93:e1:7b:27:08:d6:5b:33:c3:4d:3e:24:
83:54:95:b5:e5:31:eb:37:df:a1:66:81:a0:71:c0:f2:3b:c5:
c0:d4:70:b8:67:26:00:99:1d:12:62:02:ff:a4:32:57:60:82:
54:d5:62:be:c8:b6:c8:1e:e1:ad:1e:15:fc:6f:0a:fb:fc:64:
5c:53:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:43 2025 by rpki-client