Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/0c73832b-3c0b-3aba-a908-0cdfcc2a0bdc.roa
File: 0c73832b-3c0b-3aba-a908-0cdfcc2a0bdc.roa (raw, json)
Hash identifier: QeRaM5ypd03V81ge8ZZXKvzproQc4BQneUabb7zZgaA=
Subject key identifier: E8:7B:CE:F8:57:EE:1B:FB:C6:7A:84:15:02:3E:D9:70:08:68:89:C1
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848143A82908DAA11CCB99C0B00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/0c73832b-3c0b-3aba-a908-0cdfcc2a0bdc.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 3477
IP address blocks: 192.64.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:82:90:8d:aa:11:cc:b9:9c:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=81c7e3da-712b-4870-a4fb-c891def77f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:81:bf:1d:2e:03:a2:3f:bf:6b:6c:7e:92:
73:6c:b6:c7:4c:a3:37:60:9a:f2:ec:77:83:ca:2b:
4e:7c:fb:df:95:c1:f3:32:dd:e6:86:59:ac:3d:fc:
d5:3e:e6:45:b2:60:ac:de:78:49:59:12:90:c3:71:
1d:b0:10:ac:af:7a:c7:65:15:a9:74:c8:1b:a4:15:
3f:c1:cb:46:86:4e:7c:5b:8d:70:fd:e6:7e:a0:43:
8d:81:52:4e:f4:be:74:d5:c7:69:b5:a3:06:14:e8:
c6:d3:cc:be:54:37:a5:cf:1c:71:29:91:7f:78:71:
3c:9e:d9:76:d6:6e:d0:74:80:5c:c5:15:5e:89:27:
1e:49:da:a9:b0:0e:25:c3:e0:0c:36:39:98:7f:cf:
26:c5:3c:d0:58:ea:de:45:7d:31:06:24:95:0f:df:
76:2b:18:f4:08:06:8d:ea:ee:67:69:b5:3d:01:3c:
87:ee:3c:4b:b2:16:b9:d9:47:e1:b5:67:73:27:c5:
a5:da:00:37:63:49:65:a4:4f:3b:50:c8:e8:ec:f4:
e1:9d:b4:c0:36:b5:61:9b:c1:c6:fe:31:04:12:e2:
bf:79:ed:c9:15:d9:7d:cf:64:58:48:66:12:df:68:
38:82:06:b7:bf:e3:a4:b8:b0:b2:23:62:86:2a:95:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7B:CE:F8:57:EE:1B:FB:C6:7A:84:15:02:3E:D9:70:08:68:89:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/0c73832b-3c0b-3aba-a908-0cdfcc2a0bdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:25:e4:f6:48:fe:5a:56:58:00:0c:91:81:19:df:35:d7:80:
75:1e:16:e2:f7:43:e9:94:c8:b1:06:f9:33:8e:92:18:c8:34:
84:1f:0d:51:79:5c:25:3e:f9:f4:2e:2c:aa:62:65:90:e2:49:
49:9b:15:bf:40:84:6e:17:9e:63:dd:13:8b:68:46:f1:b7:92:
f0:13:23:37:c5:b0:d8:1d:55:c0:c2:10:01:91:51:8a:44:00:
f0:a4:94:de:59:1c:0f:85:b0:42:16:3c:8a:92:0c:0f:20:c0:
8f:9c:1d:1b:2a:80:7e:b7:e3:d5:e2:41:58:2b:e0:81:a1:51:
ea:4b:95:b2:f2:64:f8:73:03:54:ca:7e:32:c9:ff:27:57:95:
c4:64:fb:5f:fc:4f:3d:d6:47:56:16:2a:89:4d:0d:df:f9:d9:
a2:1c:de:29:02:3f:1a:9b:a7:1f:da:3e:f2:88:9f:b0:e9:a5:
dc:34:fe:32:8c:ed:7b:eb:71:de:e2:33:d9:25:93:b9:40:94:
f2:95:bc:2e:5e:c5:45:4b:5b:7a:4e:b9:9c:02:dc:56:c1:01:
ce:5e:60:db:1f:9c:68:25:ae:61:34:2a:4e:81:b7:83:f8:64:
cb:2e:d7:02:ec:3a:ec:a6:36:25:40:bc:25:ab:9c:ea:81:e3:
d8:18:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:19:27 2025 by rpki-client