Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa
File: 573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa (raw, json)
Hash identifier: hwuwO2w/AtBnH75i7UkhKGTs/XczR09nTRHGxANX6Bg=
Subject key identifier: C3:EE:E2:89:87:C7:8A:14:8D:D9:CD:1C:A6:00:63:B1:EC:43:18:9B
Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial: 010D0C9F43285848DA70FF5164927763A13C0C20
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 5645
IP address blocks: 192.0.128.0/17 maxlen: 17
192.0.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:ff:51:64:92:77:63:a1:3c:0c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=74c6bbd5-3b93-4d93-96f8-73b4052337ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ef:53:52:3a:46:ca:fd:07:f0:41:58:0a:7b:
9a:89:cc:7d:ca:f1:82:db:28:2a:04:b1:16:df:e3:
3b:9d:60:a5:aa:53:2f:ac:12:4d:1b:5e:3b:34:13:
2e:14:0a:6f:12:c9:17:16:c1:e5:a8:98:02:7d:e6:
32:6b:8b:b1:36:f4:b1:f8:29:55:a4:e7:58:54:a8:
71:ca:d0:8a:02:6e:b8:19:5a:e5:72:71:77:8e:ea:
ef:26:84:1a:ff:3b:e5:8b:15:c8:59:16:67:0d:ac:
d2:bf:04:f2:8e:f8:9a:b6:0c:91:02:25:fb:a2:d7:
2c:78:6e:b8:ab:cb:c5:79:42:30:b2:fc:0b:b6:2d:
69:8d:c4:0b:09:db:d2:49:e6:6e:ce:7c:1f:95:cb:
f3:60:16:54:0b:94:0e:82:16:6d:77:f8:a5:5d:85:
b0:e3:4a:e5:a7:75:8c:02:68:98:47:74:9e:8f:51:
5e:8e:7d:2e:18:f9:1c:28:8b:26:74:af:b5:23:e6:
32:c1:5c:07:6e:f4:ca:c6:63:2d:70:2a:71:68:81:
1d:e4:7e:1d:d3:f2:ea:61:78:d2:44:49:1d:1c:6f:
c2:7c:b4:c3:b2:eb:d4:91:29:d8:a4:4c:42:e9:5a:
f1:15:d9:34:57:03:9b:1c:db:08:4b:07:52:07:6f:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EE:E2:89:87:C7:8A:14:8D:D9:CD:1C:A6:00:63:B1:EC:43:18:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
X509v3 Authority Key Identifier:
keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.0.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:98:44:d8:a9:5a:bb:49:40:7b:00:19:86:c9:c0:f8:dd:b1:
60:8b:4b:54:c3:ed:7d:2e:dd:09:32:5c:9a:9b:1a:fc:8e:54:
c0:5c:a7:39:01:70:a3:32:8b:76:2a:65:7f:79:2b:18:f8:87:
6b:1e:71:3c:5e:d5:fe:e9:f6:53:94:c4:f2:82:9e:2e:df:9e:
28:93:bf:56:03:45:58:e8:e3:0f:f6:86:30:a7:88:02:ac:35:
11:5e:ac:b8:d2:fb:3d:a5:83:66:1a:09:c9:fc:6e:d1:b2:63:
80:01:5b:eb:23:a7:53:41:8c:f6:a6:4b:2f:71:d2:b9:aa:7c:
aa:52:8c:5f:7b:75:67:20:ee:f0:0b:2d:3e:62:f3:a8:f6:23:
76:10:1a:86:eb:0a:4d:b0:0c:c1:95:04:5e:bc:8f:39:82:a8:
08:a4:5b:10:c7:05:8c:d2:1d:c4:27:2e:12:27:a1:a4:fb:86:
81:d3:d5:5f:22:f6:0b:83:9b:93:1b:90:1a:66:a0:ed:6a:8d:
ee:5f:ef:61:f3:cd:78:75:e8:c7:66:24:58:db:c5:14:df:13:
38:9a:0c:0d:88:f8:b9:6c:4c:be:50:2b:c9:a4:fe:f3:4e:bd:
2e:78:5e:b0:15:f4:aa:1b:eb:26:6d:7e:60:9a:4d:c1:27:c0:
59:ff:05:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:19:07 2025 by rpki-client