Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa
File: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (raw, json)
Hash identifier: rxhkREmpoY67Gy342zdR5oF61poImep1Lcd14NVkKGc=
Subject key identifier: 86:86:20:5E:4E:A4:66:8A:06:2A:D1:FE:8A:5B:C5:6B:FD:D1:D1:5D
Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0
Certificate serial: 010D0C9F432858491246AEF9D062992483DEE800
Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397627
IP address blocks: 192.203.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ae:f9:d0:62:99:24:83:de:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=e5fd3d42-1428-4644-8723-b9572727c95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1a:99:40:57:1d:23:58:e4:6e:fd:19:10:50:
da:44:ee:a9:64:8c:f3:1a:cf:fc:a4:2d:f1:00:b8:
71:e5:d2:b7:50:97:59:ee:80:77:6b:77:c4:1f:69:
a5:cb:6e:51:e4:a7:ba:9d:b1:21:bd:5f:cb:fe:9f:
fd:d5:c8:db:66:68:d6:82:b6:36:13:b0:fc:8d:56:
27:b3:5f:0f:81:c4:cd:06:3d:40:39:9e:ab:29:f2:
a9:cf:4b:1a:80:c5:17:a5:6b:b7:2d:16:b5:c2:09:
1d:08:50:be:8d:b6:30:53:50:45:c1:8b:50:e2:f7:
9f:8d:3f:3b:e7:70:f4:cd:5e:d5:d3:a2:a8:75:0f:
05:ea:4e:de:27:4c:30:a7:2d:8a:d1:1c:6d:ac:11:
af:70:cb:7e:4e:16:92:c2:33:06:24:1f:12:55:e4:
73:a0:3a:b8:e5:6a:aa:e3:af:28:35:13:87:a2:d3:
74:8d:d8:f3:b6:b0:fc:7f:ae:9b:0d:f7:fc:0b:15:
97:c2:9b:82:b5:73:ae:e0:aa:c1:b6:14:ef:81:18:
fa:3f:e1:0f:a8:47:44:fb:a5:2a:8f:39:20:34:a6:
a9:62:a2:b0:8b:f8:f5:6c:0c:9d:77:c1:3e:c7:74:
7c:08:28:7b:3b:c9:31:d1:fb:ca:7a:1f:5d:44:71:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:86:20:5E:4E:A4:66:8A:06:2A:D1:FE:8A:5B:C5:6B:FD:D1:D1:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl
X509v3 Authority Key Identifier:
keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.203.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:28:f5:06:22:36:dd:ca:45:0c:91:65:21:62:3d:ad:d5:bd:
0f:06:b9:55:c1:03:2e:0f:73:27:0e:33:fe:d6:69:6a:7e:25:
e9:c6:28:a7:4e:52:ed:36:04:6b:47:18:da:16:9d:3e:58:05:
84:e7:34:1a:6b:e9:86:1a:48:e9:12:bb:c0:00:4c:ac:91:a0:
34:91:cc:0d:39:3d:b4:6d:a5:57:81:f9:11:4a:ce:eb:e2:ba:
8d:95:43:16:ee:78:23:09:c3:85:a6:96:aa:be:12:57:0b:a4:
f5:f9:b6:5d:ae:6e:d7:e9:bb:b9:8b:3b:c6:8a:0d:a1:80:7b:
32:be:90:0c:83:d2:6a:22:49:ec:b4:2f:cc:b5:53:8e:c0:b7:
09:f3:c5:59:24:f5:64:f0:2c:85:d8:12:72:3c:66:be:82:14:
11:0b:13:de:c8:ab:bf:0c:6f:22:b1:37:03:22:06:19:95:4d:
17:47:c2:33:d4:58:49:88:d0:0a:c2:7e:a2:2d:05:b0:38:da:
46:2d:d7:cf:3f:64:c1:4f:4b:da:4a:b3:42:2c:08:e5:f0:32:
76:3e:8d:6d:ea:ea:6d:6c:25:d6:d0:38:7e:b6:76:6c:eb:fa:
cf:2c:82:d4:1b:bf:b3:77:45:8c:66:dc:d1:4b:50:c5:58:a8:
28:55:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:42 2025 by rpki-client