Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/79b37f01-5e21-3a59-82ee-5a030c1c5583.roa
File: 79b37f01-5e21-3a59-82ee-5a030c1c5583.roa (raw, json)
Hash identifier: NpqBrEsIvTowIqkL6bu8OcRvbxbB3Bsb9Fu1dqd8nFY=
Subject key identifier: CC:E8:92:AE:25:EE:AC:83:89:1E:0A:C4:37:63:98:5B:38:1B:67:FB
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848530AF13C6592FB9A178C5600
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/79b37f01-5e21-3a59-82ee-5a030c1c5583.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 2158
IP address blocks: 192.46.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f1:3c:65:92:fb:9a:17:8c:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=3eecb97d-3fba-4544-9a74-8bdc20ee199f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:e3:76:24:3a:8f:ea:01:3d:ac:e0:d4:5e:
b4:46:fa:5c:86:1a:fb:7f:0d:b1:94:e2:0e:48:37:
d8:dd:13:a4:a3:6c:db:5b:b5:92:74:8a:2c:fb:57:
21:d0:1e:31:2d:89:dd:f4:49:de:14:cd:2e:32:68:
2d:da:a7:b5:14:b7:63:5d:57:5c:14:91:7c:88:45:
a0:3f:83:6d:3e:26:88:31:7d:a0:11:78:a3:7c:59:
9b:6c:8d:41:4b:8a:de:4e:1c:f8:04:72:de:4c:70:
f6:69:31:0b:39:8d:77:84:77:dd:50:59:cf:96:c3:
da:c7:88:df:8d:f0:c1:2e:a5:68:58:b7:0d:53:df:
6d:eb:d0:95:43:15:98:09:ab:2b:7d:82:d5:2e:af:
09:c2:bf:9a:04:52:f5:69:e4:d3:93:21:34:a5:83:
e6:66:15:45:cc:4a:75:98:56:83:d1:a1:67:e5:ba:
59:9f:9d:8f:ea:4a:02:9f:78:e4:9c:6a:29:ac:91:
41:68:60:f5:9b:e4:dd:75:90:af:17:af:25:41:6a:
2d:96:51:f8:9a:50:35:ed:3f:e1:b6:f6:4d:7f:5f:
62:09:e2:c8:20:80:7c:90:be:52:2d:4b:bf:a0:73:
80:a2:a7:69:5a:09:66:54:df:4d:16:af:89:02:49:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E8:92:AE:25:EE:AC:83:89:1E:0A:C4:37:63:98:5B:38:1B:67:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/79b37f01-5e21-3a59-82ee-5a030c1c5583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
192.46.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:76:46:61:ec:91:0c:74:b3:91:ae:b4:9c:c2:ec:89:6d:21:
d6:5f:c0:ab:e5:48:fa:b8:04:ac:a2:80:a2:4a:d3:9b:fb:85:
59:e1:6f:a5:9d:be:bc:d1:42:53:0a:b8:10:d9:4a:5e:57:ce:
36:48:8b:35:be:d3:53:6c:71:ae:41:2c:57:70:9d:5c:b5:97:
e0:17:7b:79:21:bd:f7:ee:9e:02:44:ca:88:1a:f5:76:4e:41:
1b:6e:6c:a3:69:b5:bf:1d:f4:15:64:78:98:58:7c:87:26:03:
93:b9:2f:d9:98:20:a6:5a:f5:1b:4c:6b:d1:e5:0c:63:63:76:
d7:7d:18:43:0b:fc:c8:5a:80:9b:8c:63:f4:b7:74:4c:52:8f:
02:82:ca:7e:49:b0:49:3c:5e:f6:da:30:27:ff:5e:c9:c9:03:
7d:d4:43:56:53:65:ba:a0:ee:63:20:21:d2:0d:23:ea:6a:ed:
62:28:e1:49:44:e9:7f:de:d6:c6:8b:6e:ef:eb:96:a0:c8:91:
3f:4c:1c:23:52:f9:79:2c:7e:53:09:a9:7f:12:b0:21:89:d5:
65:09:88:07:4d:4e:20:3c:4a:a1:a2:4d:04:39:39:9c:b0:27:
ed:d1:85:17:ba:05:09:34:38:4c:66:d1:2d:aa:6a:95:30:3e:
e8:e0:a8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:38 2025 by rpki-client