Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa
File: 3acf301c-9ec5-387a-aab4-0c7bec71a379.roa (raw, json)
Hash identifier: 0LO0XR4I06ua45JNfgTabJMvOUhG7Rk+LaDqt0G1af8=
Subject key identifier: 1E:7B:38:8B:6E:62:E6:E1:D8:31:24:5E:18:3A:A8:8D:60:EF:92:94
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB6EBA0F1E031C76557500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 192.48.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:6e:ba:0f:1e:03:1c:76:55:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=af3c4ab7-c280-440f-9ffc-0635d5b5ef99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8f:ae:6d:c2:ec:46:9f:c2:2d:c2:6c:c4:3d:
1e:74:f2:b5:16:c5:d8:84:f2:d3:3d:fe:5d:96:27:
be:0b:e5:68:1b:44:e5:7c:96:a1:62:0a:b9:99:27:
dc:d0:80:73:7a:c2:a2:ca:20:8b:cf:38:d7:cd:51:
37:97:98:bb:a9:1e:87:62:1d:95:a4:82:6b:6e:ca:
58:62:f2:5f:1d:bc:d2:6d:8b:f8:ab:2f:d6:ff:a7:
2a:29:d8:03:a6:67:05:65:4b:59:e5:0a:7c:53:c0:
a6:26:58:b5:3e:cd:65:50:2c:d6:12:be:0d:e7:8a:
f3:70:c9:7c:0e:c2:63:b5:9e:6d:69:14:70:c0:6f:
54:d7:54:45:b6:fd:04:8e:f0:48:ca:df:ee:1c:ab:
c8:d7:14:3f:f8:de:41:db:bb:a2:34:aa:42:87:47:
a8:58:65:66:12:a4:21:d6:d1:9b:c8:b9:c1:69:21:
2c:5d:7a:dc:cf:e1:05:44:c3:96:10:23:c7:df:ea:
b9:e4:60:5c:b2:5c:f4:27:13:5b:8d:40:ee:67:9c:
22:d3:f3:d7:17:59:58:ef:26:d6:b0:e0:12:84:65:
77:bc:d6:91:55:44:63:db:2d:81:e4:d5:13:cb:19:
4f:c0:f3:a7:af:92:dc:2e:20:70:36:70:27:b4:31:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:38:8B:6E:62:E6:E1:D8:31:24:5E:18:3A:A8:8D:60:EF:92:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
192.48.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:30:ce:96:f6:fa:af:b2:0e:02:e8:ad:67:97:15:f6:2b:e3:
74:9f:40:45:2f:ee:50:1a:42:b9:b6:34:da:e8:ad:00:cd:b2:
33:a0:97:21:3a:d7:75:47:40:b8:25:6b:04:a0:bb:26:4a:90:
c2:d5:4f:dd:b3:65:ac:b0:58:16:0f:bd:b5:30:55:39:82:3b:
17:f6:60:8f:45:da:ba:dc:58:dc:78:86:c4:78:91:56:8d:fe:
e4:5b:23:65:28:da:b0:f9:b8:74:0a:39:08:67:e2:87:fb:af:
f1:b8:99:5a:7c:a8:c2:b2:dc:d9:5c:18:0b:17:9f:09:a8:61:
f5:c8:a4:c1:20:77:18:95:76:a7:4d:21:6b:7d:5e:8a:5e:a1:
99:98:bf:01:dd:7c:62:e1:d7:33:29:c9:c7:1c:9c:13:4c:58:
be:3f:bd:e1:f4:e6:f6:23:74:aa:fd:d7:5f:51:55:af:1c:89:
8c:0e:2a:08:02:60:95:4f:67:b8:f9:85:95:4e:b8:a9:d7:6f:
25:3c:2e:b4:05:4a:47:76:9f:6a:e9:9d:b3:01:09:0d:f7:b8:
99:2d:62:15:96:2c:c0:9a:3f:66:9c:45:1f:9b:d4:1a:68:dd:
0d:2e:e1:4a:17:a8:c9:d4:8b:ed:31:9d:87:a0:e8:c6:dd:d4:
78:35:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:03 2025 by rpki-client