Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa
File: 1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa (raw, json)
Hash identifier: Oxs57kAiYPtN4D/7fB2hq3gWryZQrK3Gip9nIKrQcUA=
Subject key identifier: 69:34:EB:04:D1:0A:07:72:CB:05:1D:9B:3C:91:D7:5A:D5:81:BE:27
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F43285848ADC603EBC67FC3481E4BAA00
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 397373
IP address blocks: 192.154.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:03:eb:c6:7f:c3:48:1e:4b:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=adf57c76-a81b-4de6-b4a0-ba4504fec2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:99:22:23:be:34:06:db:af:1c:ff:7c:4a:
07:44:92:7e:51:4c:40:2f:4f:e8:d0:0a:a8:f0:c4:
07:da:71:8d:0c:1c:7c:51:4d:ab:db:94:0d:e5:b0:
39:f4:13:76:28:68:73:e0:2e:68:99:15:1c:3f:bc:
c7:c8:8d:de:30:d6:8b:17:4c:ae:b0:57:bb:f0:d6:
a2:d1:3c:75:53:c5:6c:b4:3a:2a:ac:d8:01:59:b1:
5c:2d:bb:8c:72:24:d0:12:a3:ed:c9:e5:21:60:2c:
d2:c4:58:8d:78:45:ab:71:15:07:df:5e:2c:38:fb:
1d:36:4b:93:92:53:64:96:63:06:a6:4f:d7:3b:7e:
40:1c:a8:ff:b3:dc:fb:72:c3:a0:20:24:29:44:d3:
73:32:18:d6:17:87:53:d1:fd:99:6f:e6:13:e4:e3:
1c:53:a1:ff:82:a8:97:39:5c:ba:3c:49:1d:7a:26:
9a:9f:39:c9:05:d7:c3:30:6e:8f:16:d6:35:e0:75:
11:44:77:04:8a:ae:3c:6e:7f:63:97:8a:ef:0e:8b:
61:a5:35:6a:be:b4:8a:b3:e5:49:c6:5e:8b:18:38:
ed:19:7e:9d:1a:21:70:54:18:32:b8:9d:01:ab:21:
c6:6b:fb:ba:ea:7f:09:01:44:2c:86:8b:2d:bb:6b:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:34:EB:04:D1:0A:07:72:CB:05:1D:9B:3C:91:D7:5A:D5:81:BE:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:6c:97:cc:a3:eb:fe:33:05:73:78:d6:c0:62:20:da:05:53:
cb:38:4a:27:f2:99:49:1c:86:e4:6d:8a:b6:37:14:92:8f:3a:
fb:a1:09:a4:d6:89:0f:79:3f:40:59:f8:3c:b9:7f:36:72:ee:
ca:0d:89:b9:5d:aa:cf:e4:40:08:e7:67:c3:a8:0d:c1:b4:b9:
08:f2:f9:a0:bf:80:1d:36:17:b2:ed:1f:55:b8:f8:bd:38:ee:
ee:d8:d0:25:95:60:55:aa:35:db:8e:e5:4c:c7:15:bf:4a:df:
a4:27:ec:db:cc:ac:56:33:79:5a:4a:f4:96:21:84:22:c8:74:
6c:93:69:5a:ca:d6:32:24:7b:e5:b0:d0:ab:e2:e3:19:37:ed:
b3:3d:df:93:f3:2d:38:72:c1:27:ee:f9:6d:39:30:58:38:98:
93:e1:5a:b3:5f:9f:7e:4b:e0:1d:12:ce:84:d4:49:e8:9c:73:
fb:5c:38:cf:df:db:53:b4:24:1f:1c:00:be:6e:09:b5:b5:77:
ff:e4:72:a4:2c:3e:a7:c3:cd:a2:6c:ef:b0:be:71:56:02:19:
f9:7a:4a:20:09:c6:dc:49:9c:ab:36:de:c3:68:0f:c4:91:15:
23:cb:d2:36:61:e7:8e:ae:b8:a3:9b:e7:31:7f:f3:4e:3a:5a:
f0:1e:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:11:23 2025 by rpki-client