Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/4ff9a811-eea9-3272-8194-90b08cae19f3.roa
File: 4ff9a811-eea9-3272-8194-90b08cae19f3.roa (raw, json)
Hash identifier: 5itlb3vpTogsdO8w/2upWt4RaBOH9cVCisgn/Xuxkys=
Subject key identifier: AF:C4:09:FB:01:EC:B6:1E:DD:02:CB:C4:68:85:69:E5:AC:73:43:D7
Certificate issuer: /CN=47c38599-11bd-476a-9b98-d0fb43b76d60
Certificate serial: 010D0C9F432858489A3B45ED5B69C746B0080C00
Authority key identifier: 69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/4ff9a811-eea9-3272-8194-90b08cae19f3.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 19845
IP address blocks: 192.131.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:45:ed:5b:69:c7:46:b0:08:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c38599-11bd-476a-9b98-d0fb43b76d60
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=c9aeec87-6c9e-4139-b863-15cb6f4f588a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:28:ab:4b:c1:f1:9f:61:06:ff:23:24:69:
14:c1:ad:4e:2e:d7:93:45:6b:80:2d:5e:84:b6:fa:
b7:77:ea:85:03:94:c2:4f:98:a9:aa:42:14:3d:e4:
2f:25:3b:1b:79:d9:e1:91:31:3a:92:46:dd:f2:a1:
69:ac:40:64:10:63:47:11:d9:01:17:1b:a4:85:35:
ad:57:52:b3:7f:e9:66:1a:99:1a:61:40:c4:60:64:
60:41:94:75:94:d8:e2:1b:3d:b1:02:91:0c:fe:74:
5c:39:14:00:4b:6a:d7:ae:f7:5a:1a:2a:8b:3c:6f:
a8:ca:99:80:5c:ba:0a:31:3b:96:23:33:f9:c2:98:
29:e3:98:07:74:43:27:b9:c5:ac:33:8a:0a:f0:51:
cb:fa:57:0a:32:e4:78:ea:45:21:df:dd:d1:12:c7:
60:59:c8:72:52:dc:06:29:4e:d3:1b:65:a8:be:02:
b8:0a:3c:72:fb:82:6c:3e:a7:d7:99:d3:61:86:b1:
ad:0f:51:a1:10:4c:23:08:39:74:0d:53:eb:3c:82:
db:c6:a0:0c:7b:e7:e1:d4:ad:23:5d:f3:e7:db:b2:
d9:51:fb:b4:62:b1:f8:d3:53:f4:7c:4c:17:93:99:
c2:56:b5:0e:56:38:d6:8c:e0:8b:8f:6a:b8:48:11:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:09:FB:01:EC:B6:1E:DD:02:CB:C4:68:85:69:E5:AC:73:43:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/4ff9a811-eea9-3272-8194-90b08cae19f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl
X509v3 Authority Key Identifier:
keyid:69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer
sbgp-ipAddrBlock: critical
IPv4:
192.131.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:d1:0a:06:45:08:bb:dc:e0:fe:03:df:33:39:35:7e:03:00:
45:ee:92:77:c5:af:25:99:64:f2:a5:bd:32:e4:07:1b:f3:bc:
a3:92:9b:ab:9b:bd:6e:e7:68:b4:8c:b6:36:1c:d4:64:31:5e:
34:89:78:a6:a3:5b:14:b9:24:74:55:eb:09:bd:98:8d:4d:14:
a0:d2:49:82:93:97:0c:c3:94:d9:04:e4:74:2d:a4:57:82:c7:
f0:2d:e9:55:2d:6c:78:86:b4:23:16:b2:8c:2d:b9:6f:fc:4d:
1a:a2:d9:b2:89:a8:17:78:d9:0f:cf:7a:0e:59:c6:41:27:be:
1c:3e:57:f5:aa:72:39:82:cd:22:f5:eb:1b:dd:c8:a7:5a:d8:
be:e4:a7:63:a9:7d:a6:4f:17:87:70:aa:7d:4c:ae:c2:c3:88:
51:76:7b:0e:a6:4d:ae:80:6c:f7:61:00:e9:83:7c:e4:c8:c4:
24:5b:e7:91:8e:04:7a:aa:20:3b:71:9f:f4:81:f2:90:3f:ac:
30:63:48:d0:a1:90:d2:ca:5c:a4:7a:29:23:b3:8d:5e:1c:56:
f2:f0:fe:ae:7e:9c:9f:9b:57:a8:21:76:5c:c3:71:b8:e5:05:
63:fa:82:b4:1b:26:95:e9:79:52:c9:e2:d0:1f:75:1b:0e:8b:
53:58:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:28 2025 by rpki-client