Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa
File: 10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa (raw, json)
Hash identifier: NbA6vKPmLJypLUqhpGYVQJBid7cdIf2KoXNhlQ65b+Q=
Subject key identifier: 38:84:8C:ED:9E:39:D6:50:93:27:81:3C:17:8C:75:CB:6C:7D:7B:CF
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F43285848ADC603B96499796033C7BE80
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 13768
IP address blocks: 192.154.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:03:b9:64:99:79:60:33:c7:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=5612aa7f-5d43-46e8-b650-9695e13e6f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:b0:4f:c3:12:cb:b0:a8:4b:5c:8e:c9:50:
6b:a8:6b:40:d3:eb:91:7e:0b:94:cb:bd:3e:11:6f:
9b:c0:21:20:b1:c9:76:0c:86:73:24:34:31:2a:70:
00:78:46:8b:a8:ee:0b:bd:7f:67:ba:d2:84:e2:bc:
02:92:eb:4f:65:45:b2:1b:a4:0c:45:d9:a4:7a:21:
14:51:21:1c:42:50:11:a7:95:01:02:42:0d:6b:09:
f7:ca:66:49:57:95:81:d3:dd:e5:30:62:d6:b7:bf:
86:a9:0f:19:17:da:e8:64:64:bd:96:22:59:69:a2:
a2:9c:4a:3e:04:e5:cc:f7:0c:32:b9:95:24:3c:9b:
a7:80:8f:98:f6:a6:7f:7c:4d:e8:77:06:7f:58:14:
45:fc:9e:5c:0a:f7:18:63:17:cc:59:89:33:80:f2:
6b:9b:b9:3d:04:ea:36:6a:b9:e7:e1:26:f7:1c:4a:
38:32:44:1c:52:10:6b:21:79:5d:fc:b3:b6:d0:de:
13:39:e5:d7:8d:ca:bf:7c:93:d1:f5:72:74:56:c9:
0c:84:bb:3c:c8:12:17:6c:19:02:72:2c:78:ef:e6:
31:9d:a9:7a:06:40:a5:79:55:5f:65:59:fd:39:0b:
dc:97:88:04:58:e6:c8:42:70:1a:d4:8c:4b:8c:51:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:8C:ED:9E:39:D6:50:93:27:81:3C:17:8C:75:CB:6C:7D:7B:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:2c:cf:21:8b:4e:11:1a:73:05:a7:12:fa:0d:98:10:00:2d:
26:69:a3:a7:b1:44:cb:1c:9e:78:d3:ee:8e:cc:9b:fc:d0:21:
41:82:d1:8f:96:6d:0d:22:d1:bd:49:1c:57:d3:73:e7:c4:e7:
31:4d:b9:38:29:b7:9e:d9:09:1c:40:4e:f5:83:fc:a1:cc:3c:
18:b3:f3:4c:8a:b2:a5:7d:a8:76:1d:27:4c:36:bf:13:b9:62:
91:a5:b5:21:66:2b:42:80:03:21:89:40:33:ca:b7:7a:7a:7c:
bb:14:d2:a3:22:06:fa:b4:c0:93:bc:2c:f1:e8:28:42:cd:17:
37:93:30:48:cc:10:e6:a1:e1:50:05:4c:c5:6b:cf:c3:53:86:
87:02:48:bf:62:fb:b5:e7:80:90:4e:6e:3d:df:9b:f9:05:8d:
eb:57:11:9a:a2:02:6e:49:78:33:bf:51:90:af:e9:e3:ed:4c:
21:43:92:40:5f:34:2e:86:ec:42:75:01:89:d1:c2:1a:7b:43:
4f:43:1b:b1:dc:b3:a3:0a:f3:78:0b:e9:56:27:37:80:e3:9c:
45:c1:f1:8c:10:85:44:d9:8e:53:30:1c:f0:fd:2e:ed:73:50:
33:ea:52:4e:48:21:43:a4:1f:21:cf:af:27:78:d3:ad:fd:eb:
a2:80:ac:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:35 2025 by rpki-client