Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
File: d784b0e5-c75f-36a1-b21e-eade3788cd04.roa (raw, json)
Hash identifier: WyABDUtdg/RnhG9l9tDbeQgaquuz2mGgmQ4B/YTmXhU=
Subject key identifier: 6E:A1:45:34:75:28:C4:C7:7B:39:C8:19:4C:95:53:B0:83:A9:82:F4
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F432858492CAE8347878CE500FE139580
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 397373
IP address blocks: 192.158.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:83:47:87:8c:e5:00:fe:13:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=8f849ef3-4957-485a-ba96-939f574ab17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:ab:60:9f:ca:0b:be:a8:e3:c8:4e:22:04:
20:c7:2b:17:d3:64:54:27:08:ba:7f:6c:d2:bd:c0:
83:d0:14:3c:c5:db:46:36:ce:fd:46:af:de:4b:2f:
34:20:45:57:06:6c:03:cd:8b:ca:5e:e8:e4:3c:b5:
a6:12:e2:ba:a1:90:31:1a:4e:47:4a:12:fa:3e:21:
37:59:fa:57:b0:ea:a2:fa:55:dd:46:0c:f8:da:03:
ea:5e:a2:21:f8:9c:6d:8a:63:cb:22:46:0a:11:3e:
d8:08:ed:d0:6e:40:11:fe:34:d8:37:09:19:5c:28:
53:58:95:24:20:f2:42:df:f2:b6:b7:14:df:2b:82:
95:63:04:53:b8:05:3a:ad:d5:75:21:32:75:49:73:
b1:00:ba:6e:d2:de:74:67:29:92:be:bf:72:61:84:
56:8c:d8:95:93:8e:dc:a4:fc:89:08:f4:42:28:4e:
c0:31:7c:c8:9e:42:5f:f0:86:7a:11:93:62:65:f2:
ac:44:32:25:9d:77:92:e0:9d:42:fe:54:1a:74:a9:
e1:88:fc:b1:fa:2b:e8:2c:64:08:78:a7:e8:e2:5d:
d3:94:a4:e7:65:7c:e9:b5:f8:8c:47:49:c9:d9:8f:
a5:35:84:3d:c3:aa:1f:0b:2d:dd:d2:97:da:19:ff:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A1:45:34:75:28:C4:C7:7B:39:C8:19:4C:95:53:B0:83:A9:82:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.158.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:f1:71:ac:0b:d7:cc:90:4d:c9:3b:1a:7a:9b:5f:b2:4e:e5:
55:12:27:59:2a:8d:9c:19:38:74:01:92:b3:eb:9f:3e:29:ae:
9a:01:38:00:74:00:65:da:c0:9a:f7:14:1e:2a:29:0b:f7:18:
a8:aa:52:ef:02:15:16:0a:90:11:c1:1a:62:0c:d2:89:0d:77:
69:af:ea:1f:b3:2a:5f:d2:e2:aa:7f:20:1a:0e:3e:44:70:4e:
3e:cc:87:3f:27:d8:cd:29:ac:5c:f6:98:d4:c7:30:43:24:39:
a6:0a:f9:3f:00:dc:5a:dd:a3:ac:f2:a8:e5:6c:e0:a0:8d:e9:
db:c7:b8:ea:b4:c7:62:87:5e:ea:d1:c9:54:b4:20:fc:b3:5c:
09:96:4a:c7:67:88:bf:0b:c3:09:b6:fe:5c:0d:73:1b:46:a0:
bc:94:d9:d9:2f:43:8d:87:93:7c:78:ab:e6:d4:f6:3b:95:c8:
8c:05:8f:09:1b:75:f4:39:c3:cb:93:bf:94:75:06:f4:20:b1:
40:e1:4f:70:f4:e0:6b:81:a4:6f:55:04:0b:b5:ed:1e:9d:00:
28:85:cc:96:03:f4:88:66:c6:54:68:57:cb:88:4f:1c:99:3b:
e9:12:3e:0e:e3:fc:ed:0a:7b:39:ab:51:a2:7f:54:f3:e9:e5:
a1:4d:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:10:08 2025 by rpki-client