Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa
File: 6bff204f-baf3-3c15-a992-3135c46aad0b.roa (raw, json)
Hash identifier: kAHTpiyWnJlaphc0WyB9GFbTD8pMF3IhtgFZWQKr6Mo=
Subject key identifier: BD:95:51:CB:EC:14:31:DA:EB:23:FC:AC:81:84:C1:AE:1C:83:1E:FD
Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Certificate serial: 010D0C9F43285848ADC606180259EA9BD18A3400
Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 40244
IP address blocks: 192.154.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:06:18:02:59:ea:9b:d1:8a:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=db521077-4ffc-4576-b726-102b7b44cdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:cb:03:f3:57:cd:86:cf:ae:96:36:30:a3:
77:fa:fb:62:66:11:c9:12:a0:98:2e:8a:2b:e0:f8:
c6:2e:49:5c:9e:26:50:93:20:d3:44:07:e4:de:c7:
c6:22:9e:c4:f7:04:d1:f6:24:28:07:a0:5f:56:d9:
11:2a:40:96:65:87:1b:f6:dd:12:6c:8e:af:bf:b6:
8f:75:63:c1:eb:bb:29:06:68:dc:fd:31:27:3f:ef:
d0:3d:d2:33:b9:8f:c1:7b:95:73:4a:6a:3d:d6:7a:
c7:15:1a:d1:bc:e7:04:9b:15:72:2e:03:13:ff:ad:
62:47:be:e7:8c:5d:14:ee:a7:75:73:33:fe:ee:b3:
89:91:30:f1:a0:d0:13:78:86:f2:cb:a3:e0:4e:43:
7a:9a:8c:90:09:44:d2:87:78:d6:b0:47:08:a6:4c:
0d:95:1d:a2:78:d3:6e:5a:ad:86:bb:d7:7f:c2:0f:
e5:0d:ee:d5:7b:e7:3f:d2:33:63:00:90:a0:1e:9b:
19:93:26:39:22:b4:9c:dd:9c:b7:69:26:cd:d4:80:
58:33:30:b9:2f:3a:65:4b:ab:49:c8:c8:03:6a:88:
84:f8:c5:fe:97:88:ef:ba:e2:c3:7e:a0:bc:18:4d:
10:55:4a:35:e5:9b:93:a7:90:15:6a:91:0e:94:73:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:95:51:CB:EC:14:31:DA:EB:23:FC:AC:81:84:C1:AE:1C:83:1E:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl
X509v3 Authority Key Identifier:
keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e7:c5:2f:aa:a2:e3:9f:c4:f7:06:29:73:5e:62:22:62:5e:6d:
23:a8:99:65:a7:b6:89:a9:3a:65:ed:b7:65:45:f1:66:b8:3d:
bc:da:80:9e:b3:36:04:bb:d7:49:82:e0:f9:67:7f:81:b4:6f:
c4:45:c5:6f:65:e9:a5:fc:22:83:69:41:03:2e:29:bd:c3:05:
2d:c4:e0:d9:a3:c7:ef:99:36:cc:9f:69:e1:b7:70:16:e4:a5:
ab:41:c6:6c:d8:ac:03:2d:fc:ff:73:05:77:be:b9:aa:18:e7:
4d:21:4c:30:b5:36:2d:43:63:90:25:b9:25:df:af:3a:11:da:
9e:25:08:8f:16:c2:f6:56:c8:02:a4:68:a3:db:38:8f:e6:b5:
d8:64:ba:cc:52:05:c9:4d:22:be:a6:5b:02:c4:ea:3f:58:15:
91:9c:a2:71:18:30:55:d1:a4:17:4a:f3:7f:5f:fa:7a:31:5b:
8b:bb:ba:0e:47:e2:37:be:ce:9a:8c:29:95:4d:d0:34:4f:01:
15:b2:a4:97:04:2f:86:2f:ba:41:2b:b8:de:9c:44:e7:70:1a:
c0:f4:9f:54:49:57:76:f8:a7:4c:bd:d1:4d:20:c5:95:d4:59:
fc:4b:be:20:07:f1:e3:7a:70:0e:a1:c5:9c:b1:8e:1d:fe:d3:
3f:ea:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:57 2025 by rpki-client