Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa
File: 718aca4e-36f9-388f-afe0-123ff07786c7.roa (raw, json)
Hash identifier: 6ta5c2n6jpieyHX8r2f6fHaEb/qI4fDxIieh+h30lcs=
Subject key identifier: 1B:E9:88:F7:23:42:BC:48:FF:B1:43:6A:7B:FA:AE:34:8B:C9:79:5C
Certificate issuer: /CN=4a669737-4387-4a5c-829a-5cf431c6469e
Certificate serial: 010D0C9F432858490340A4225C4C1EEC10C18F40
Authority key identifier: C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa
Signing time: Wed 26 Feb 2025 16:51:30 +0000
ROA not before: Wed 26 Feb 2025 16:51:30 +0000
ROA not after: Tue 27 May 2025 15:51:30 +0000
asID: 393453
IP address blocks: 192.138.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:03:40:a4:22:5c:4c:1e:ec:10:c1:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a669737-4387-4a5c-829a-5cf431c6469e
Validity
Not Before: Feb 26 16:51:30 2025 GMT
Not After : May 27 15:51:30 2025 GMT
Subject: CN=114ebd66-c190-4bf4-a93f-750fbfa24c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:52:2e:54:af:87:db:0b:02:8a:fc:78:73:
eb:88:b4:e4:29:e9:47:99:dc:48:81:3a:d0:94:a0:
39:f0:02:96:2a:87:12:b8:19:b9:0e:6a:0a:93:b8:
4b:22:1a:f6:c5:a5:92:a7:74:03:e6:97:75:ba:58:
1f:74:72:97:14:6b:72:b1:f2:6a:7c:ef:7a:16:8c:
e7:e0:57:96:03:53:3e:a2:8b:10:69:01:b6:99:28:
3d:03:f2:d3:fb:23:82:36:bd:9a:0d:6a:be:5a:dd:
8a:ba:a2:8e:75:e6:1a:3c:5d:2e:5c:3c:f2:4c:5a:
5c:5d:57:6c:fa:a5:57:3e:14:38:82:dd:65:64:e2:
60:bd:dd:28:91:34:99:91:be:b1:66:31:90:ae:61:
fa:17:be:12:c4:23:9b:96:44:39:c7:12:cf:fe:8a:
32:fd:ea:e1:13:11:b1:f2:7c:31:12:5d:47:3c:f7:
d4:15:8d:d0:6f:5b:4f:30:a2:cd:d5:f7:42:48:fe:
99:8f:dd:3e:9a:0e:55:3d:59:f9:bc:79:4b:23:f7:
df:54:6d:34:e7:0b:59:5e:8e:90:d9:c7:d6:9d:3c:
b9:5b:2f:79:71:47:12:c7:8c:dd:b3:89:4c:f8:43:
14:7c:35:a9:67:b0:a8:b4:9d:5c:d1:5b:23:dd:8e:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E9:88:F7:23:42:BC:48:FF:B1:43:6A:7B:FA:AE:34:8B:C9:79:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.crl
X509v3 Authority Key Identifier:
keyid:C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.138.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:e6:63:31:bc:6b:be:4f:d5:34:56:11:d1:9c:9e:db:15:5d:
09:80:03:e1:9d:e0:37:eb:8c:49:e8:a2:9b:2d:9a:db:75:16:
1a:67:93:46:55:b0:3b:e4:c0:fe:51:2f:24:a3:97:71:a2:56:
19:55:97:04:8c:3c:7c:82:72:71:2c:35:ae:52:c5:80:d7:96:
2a:8c:9c:8c:1f:04:47:73:c7:a9:e0:36:30:3f:4f:34:75:15:
e7:cc:00:0f:59:4a:24:b6:4b:21:2a:96:54:f8:55:f8:c2:f9:
d0:54:e9:88:b0:9f:7f:c3:4b:8a:98:ef:07:02:54:a9:47:39:
a6:8a:75:1d:86:08:e4:c9:9b:b2:3b:82:eb:19:f3:e2:87:39:
c4:74:17:62:47:06:47:48:6e:1c:a0:08:f2:6f:2c:f5:22:95:
6e:a9:b6:d1:d2:6f:da:7f:e2:9c:51:94:05:2e:df:8c:cc:99:
10:cf:ec:86:1e:d2:0d:61:58:96:38:45:c5:4a:af:75:d4:bb:
d9:ec:94:40:3c:c2:eb:95:83:3b:94:3f:2f:77:9c:7a:72:e7:
16:db:fb:c7:b8:59:4c:4b:c9:67:b8:85:56:2c:99:8c:10:4e:
cc:92:d7:1c:e2:1a:fc:58:de:34:16:bf:cc:e2:d5:80:d7:29:
20:ef:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:21 2025 by rpki-client