Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/934da524-4660-3a88-8460-1c35a63999e3.roa
File: 934da524-4660-3a88-8460-1c35a63999e3.roa (raw, json)
Hash identifier: 6ch7730v1oJLWDfQgI9NRnLz3+Bw7tfMYr29NBXNVv0=
Subject key identifier: AC:ED:5E:22:11:81:C5:A1:F3:9F:50:B0:86:EB:74:B2:FF:E8:74:85
Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial: 010D0C9F43285848E2D105C669C5EC45A645CF40
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/934da524-4660-3a88-8460-1c35a63999e3.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 22418
IP address blocks: 192.157.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:05:c6:69:c5:ec:45:a6:45:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=f17ed57d-7336-4ef5-adf1-e9500b7738fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:58:9e:ec:4c:db:7f:de:6c:71:51:25:bb:
ca:2e:43:6d:48:90:b6:36:19:ba:b4:8b:7a:c5:b2:
5c:6b:36:44:0b:89:ee:c3:d3:09:01:9d:23:96:bb:
fb:b1:5d:86:15:a9:80:02:ce:be:8a:3e:d1:4f:9e:
2b:b0:a1:f2:41:6e:85:24:31:a4:7c:41:55:6b:76:
6a:b5:a9:56:64:f1:80:36:1e:1b:ea:8d:4e:3b:e9:
9f:40:65:a1:4b:63:dd:a7:01:35:6c:b0:37:b2:f5:
4a:ce:97:7b:04:e6:a1:0c:03:cb:c6:3b:44:d4:a0:
be:bc:ed:9d:8b:13:b2:b8:21:2c:73:58:ab:a4:51:
a7:5c:d4:03:0c:f5:7f:42:91:71:81:6d:e3:00:35:
fd:55:cf:45:ec:c3:6d:12:c7:c4:a1:ca:d4:e3:91:
86:ae:fb:f6:3d:08:44:85:e0:8b:57:f4:6c:44:a9:
92:c1:f3:83:29:fb:9f:25:6f:dd:b7:ef:dc:a5:55:
ef:5d:7c:76:79:9e:62:28:c6:91:38:2d:6f:9d:49:
cf:9f:be:40:a6:aa:83:d8:0b:66:e5:86:d4:41:1c:
12:bb:43:20:ee:00:62:ca:e6:c4:68:75:6e:fe:a3:
fa:7f:1d:be:3e:74:4b:13:9d:6b:a8:c4:cc:cc:f8:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:ED:5E:22:11:81:C5:A1:F3:9F:50:B0:86:EB:74:B2:FF:E8:74:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/934da524-4660-3a88-8460-1c35a63999e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
X509v3 Authority Key Identifier:
keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:f3:bc:b4:ab:03:37:97:1b:11:0b:fe:3b:06:67:e9:ef:15:
00:be:92:ba:47:89:02:0d:9b:72:9d:c5:14:66:7f:d6:7c:1e:
56:46:bf:03:84:ef:55:71:71:a9:ae:c3:6b:46:1c:f1:67:8c:
58:76:7a:74:ba:04:f5:83:7c:07:09:71:4d:20:41:33:21:3d:
b3:e5:36:8a:88:8f:b9:77:f8:93:60:fc:d4:26:4f:27:3f:54:
cb:57:72:57:7f:06:91:43:93:c1:e1:50:0b:5a:17:cc:ad:5c:
26:ba:b8:96:b3:6e:19:a9:2a:b8:0d:1f:92:af:da:17:d4:04:
ac:e0:b3:8b:87:bb:25:6a:2c:4e:7e:b6:f8:52:27:cc:45:d1:
d5:a9:d7:02:71:b1:b9:21:a8:64:bc:2f:ca:df:f9:bd:cd:af:
53:9c:92:17:2a:01:0e:f4:11:e4:97:c9:a3:2e:00:79:ae:93:
35:5e:bf:03:1d:82:7f:a5:6d:b9:bd:b4:81:be:d0:ce:63:bc:
c6:2e:b5:7b:e0:2b:11:3e:64:8c:a7:e7:e4:91:8f:ee:c2:2b:
27:e7:ed:bb:e6:39:8c:c3:94:a3:da:d1:98:c9:2e:9a:29:b1:
b9:e1:f0:64:c8:70:f3:2a:ae:b5:3e:cd:c7:20:11:73:ed:b1:
d3:9e:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:58 2025 by rpki-client