Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa
File: 2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa (raw, json)
Hash identifier: iKphdqUQN7necEMOusSjfpqKRbR2yO6IHrzN12r2Nfk=
Subject key identifier: EF:41:DD:6D:0A:0B:95:04:53:09:8D:25:67:10:20:2C:E5:78:2D:3D
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487325B57BD82E7054F931F7B8
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.129.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b5:7b:d8:2e:70:54:f9:31:f7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=0328f2ce-3739-44e3-b97f-e947b19a4856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:e8:37:4e:d3:71:9e:0b:cc:dc:23:fb:0e:
49:7c:1d:1b:e3:d3:c3:40:41:6b:50:23:9a:a6:cd:
d3:8c:0a:6d:76:53:37:e5:39:61:fe:7c:a2:d6:92:
6a:7f:08:04:c7:86:e4:31:05:7b:77:50:ed:6a:a7:
be:af:17:6d:26:d5:a5:b2:ad:ce:55:dc:3b:bf:8b:
76:eb:5a:50:e7:9b:97:76:87:80:3d:29:9e:31:62:
68:a9:77:8a:b4:fc:82:54:90:d3:0a:35:d0:68:48:
46:ff:70:85:1a:ae:8b:b8:1b:a7:cf:30:bf:80:7d:
31:05:3f:81:79:a0:49:5b:d1:a9:c1:cf:6b:b6:19:
29:4b:b7:fc:f6:5d:ae:90:70:e2:4b:98:0c:8c:33:
46:8f:2e:08:fa:6c:78:44:67:9b:a4:2b:91:2b:59:
73:49:32:24:3d:a2:71:28:7e:05:15:04:97:a6:35:
df:eb:70:bd:ec:ec:31:6f:19:3e:26:bf:e9:25:f5:
27:ff:01:f8:a7:2b:c5:3c:bd:d1:fa:ff:03:04:b3:
77:cc:ff:56:19:71:74:68:de:6e:77:53:ed:f5:33:
38:c9:bc:7d:19:76:79:dd:5e:a8:ff:c5:45:d5:1d:
06:ec:4d:e6:38:67:9b:8e:cd:0e:34:f1:a0:d1:f6:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:41:DD:6D:0A:0B:95:04:53:09:8D:25:67:10:20:2C:E5:78:2D:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.129.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:2a:92:1b:94:16:c1:45:ea:35:9d:ab:5e:d9:e0:b8:6d:ef:
65:9d:b7:17:6b:78:03:8a:54:77:c0:f8:dc:4a:cb:8d:21:28:
9c:3d:ee:5a:90:74:74:66:2b:0d:c7:e5:a2:66:a6:88:15:cc:
79:3d:31:58:11:87:1a:8e:74:1b:56:4b:bf:ec:09:3f:59:42:
4d:3f:e5:39:a1:18:d7:f6:01:d4:dc:e7:bc:63:f9:2c:87:c0:
7b:7f:5f:dc:66:8f:b6:78:f9:cb:c9:88:5f:50:47:d8:c0:94:
3e:b9:2c:af:07:9b:c6:68:08:3a:b9:37:34:1e:77:78:57:26:
e3:a5:b5:28:c7:38:4a:02:a1:dd:33:9a:db:aa:2e:8c:ec:91:
31:6f:b7:ef:22:f5:37:e2:6d:66:7c:5a:b6:c2:75:a4:ae:80:
81:7e:68:7f:3d:2a:59:aa:a3:f8:e5:24:c5:3c:65:01:2c:38:
87:d2:a4:12:3c:24:08:a1:5d:6e:35:5d:aa:a5:63:4f:0d:71:
1d:42:79:62:1b:c6:0c:d7:98:da:21:43:73:0c:55:5d:99:ea:
dc:e6:fc:75:f3:24:50:df:a9:98:b3:a4:a2:af:6a:c7:47:8f:
7f:83:ef:7a:dd:e4:a8:13:b4:d1:75:38:a4:70:56:53:56:45:
e9:a3:31:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:17 2025 by rpki-client