Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b439776b-bd65-36a5-aa38-ac1d0a4b611b.roa
File: b439776b-bd65-36a5-aa38-ac1d0a4b611b.roa (raw, json)
Hash identifier: xhctlbsOKhak8qPBN3MD2egUROw2ccyn8+wHMCUOyxE=
Subject key identifier: EA:41:42:4D:3F:F3:20:68:B4:E9:2B:D4:D1:94:62:28:38:75:7B:3B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489E6B66A68BE3D7FA2283AA40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b439776b-bd65-36a5-aa38-ac1d0a4b611b.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 63949
IP address blocks: 192.81.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:66:a6:8b:e3:d7:fa:22:83:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=6a353c70-03ca-4d02-8878-8e31f972b742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:37:b3:28:8a:50:15:da:5f:1e:75:10:ce:1d:
9d:a8:05:d8:5c:02:da:3a:02:95:1e:de:30:08:81:
33:80:ec:6f:22:f4:c6:26:82:46:bf:0d:b1:75:dc:
61:8b:db:61:1f:06:f2:5e:e5:34:91:49:41:06:a5:
47:84:a4:37:4a:70:e0:78:bb:67:f8:a7:08:92:2b:
fe:8e:3d:06:4b:0a:92:f9:4f:38:84:23:62:11:2d:
b0:bb:a0:e9:28:23:53:86:c5:ec:f2:23:1c:9e:1b:
de:aa:58:59:1e:5c:e8:0d:4a:4d:1d:d0:94:12:78:
d5:dc:c1:4a:2f:dd:05:70:7a:35:e0:f1:87:03:57:
53:25:99:d6:04:20:78:1b:a9:b0:f2:da:55:4b:30:
bf:10:26:95:62:87:09:0e:4d:f2:05:38:98:46:df:
8f:de:4e:ae:54:df:81:8c:1a:8f:1b:78:00:f8:81:
0f:2c:83:35:49:e7:2f:b4:6c:5a:44:c3:5b:50:7b:
e9:29:84:99:e5:d7:c0:12:67:a8:21:90:c1:26:b6:
5c:6d:df:ca:ec:05:cd:57:0b:7c:2f:e6:4a:60:ba:
ce:06:00:32:63:53:98:7c:91:4e:31:3c:c5:67:c3:
fc:7a:23:02:79:9a:32:65:df:42:bd:ba:7f:79:08:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:41:42:4D:3F:F3:20:68:B4:E9:2B:D4:D1:94:62:28:38:75:7B:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b439776b-bd65-36a5-aa38-ac1d0a4b611b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:49:18:60:88:cd:10:1e:ae:7f:03:aa:e7:84:f0:78:2d:9d:
2e:e1:87:42:c5:94:8b:ba:97:43:48:80:2b:44:68:e0:5a:e8:
54:ed:4a:de:fa:a1:4f:1e:4f:84:23:09:90:84:9d:cd:4c:a5:
e0:2b:ca:aa:17:83:75:3b:33:d4:27:d5:1f:05:7d:43:f7:73:
15:84:ca:1f:2f:0d:28:2d:bd:ce:dd:32:f6:26:1f:8a:31:31:
b3:19:e1:79:9c:f9:08:a1:bc:44:a2:82:db:8e:fb:e1:d8:9d:
43:06:38:83:e6:17:f4:b7:67:7c:09:bd:66:f1:59:d7:aa:2a:
18:9a:53:57:c1:04:ed:5d:e9:5c:3f:fd:41:75:92:eb:8a:d3:
ec:d8:43:28:58:c5:b7:0b:7d:70:f1:9d:9d:15:e5:c6:99:1e:
a4:ce:39:d6:f7:2d:97:97:71:93:12:f2:3e:85:02:bc:77:5c:
a6:84:52:04:e2:48:c7:1a:85:68:1b:17:61:40:1f:cb:a8:9e:
e2:37:4a:6a:7e:d5:7b:dc:5c:98:f2:7c:76:a6:90:ce:75:e4:
db:3b:ab:1e:b0:93:af:e2:e1:19:ee:45:d2:33:bd:4a:11:49:
8b:70:e8:ce:52:77:12:3c:d1:3e:ba:fe:1a:10:8b:26:34:72:
36:06:5b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:33 2025 by rpki-client