Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa
File: 3004d2b4-bece-3042-9132-e897abee7f3a.roa (raw, json)
Hash identifier: aNsopVXDMvCAyqbAsPKUon9AZAoVhgc37j+nWNpIRvc=
Subject key identifier: EF:B8:3F:E2:37:9B:D8:D4:E9:E8:EA:7A:21:4E:22:72:E9:F3:53:DD
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487325B55ACD8CF4DACE7C7140
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.35.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b5:5a:cd:8c:f4:da:ce:7c:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=8fb9128e-bc34-40bb-b22f-8826ba8f26c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:b3:28:54:4a:55:40:af:0e:ae:0a:54:18:
76:4a:44:9e:c3:57:84:0e:14:00:57:6e:c7:b7:54:
84:e3:18:fb:b0:5b:4c:1f:d1:47:b3:14:f9:97:89:
83:17:3a:1e:6c:18:27:e2:ac:2b:41:99:78:c4:fc:
9e:bd:ff:3b:9c:61:99:05:cc:28:b9:cd:99:1d:8a:
ad:34:bc:30:cf:d2:d2:5d:78:24:b1:7c:e3:bb:1b:
9f:63:f7:01:a8:30:f0:a6:8c:1c:b9:b0:b7:e8:ea:
3f:1c:c4:f4:dd:16:5d:36:1b:45:a6:e3:d1:4e:95:
d9:2f:9e:cd:db:95:ed:6e:47:e9:76:59:e7:72:81:
98:0b:f0:60:27:9e:2c:60:81:6f:16:36:70:84:7a:
0c:75:65:26:32:c5:6d:6d:e5:ee:d9:fd:b2:da:df:
28:41:5d:4f:0d:c2:dd:38:6f:d9:e4:24:b0:32:7b:
fc:28:e5:e6:8a:f4:5f:97:4f:a1:85:fd:53:59:7f:
50:d9:eb:81:04:1a:6d:e4:2a:2c:48:4a:f8:27:8e:
b8:91:77:6d:d4:97:bb:7c:24:81:7a:08:68:b7:34:
3a:af:77:51:30:17:ca:88:c0:40:9e:54:a6:f2:32:
14:3e:05:fc:6d:f7:4a:28:64:be:d1:5e:71:07:ee:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B8:3F:E2:37:9B:D8:D4:E9:E8:EA:7A:21:4E:22:72:E9:F3:53:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.35.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:0e:08:14:bd:b5:03:da:6d:f2:c5:21:dd:55:53:cc:d8:2a:
f5:a9:64:72:a2:fe:bd:de:dd:54:db:95:22:96:03:7e:40:b6:
97:30:4b:c2:7a:a8:fd:48:df:8b:9f:09:e3:2e:53:cd:09:60:
76:b1:c5:1c:ad:9c:e6:95:64:f5:91:f6:51:db:a5:bb:d1:82:
76:c6:ff:02:14:1a:ab:86:5b:5a:b4:1f:2e:80:2c:72:ff:53:
f4:c6:12:0f:0d:e7:59:a6:74:a0:0d:dc:78:71:87:8a:cd:2c:
d2:ab:49:d0:44:bf:cf:aa:3c:70:fc:3e:aa:d8:64:9b:30:9e:
2d:02:54:9c:11:5f:5d:f0:89:1a:3a:c2:d5:89:a6:e5:da:54:
58:8b:df:47:3e:f2:af:5b:7e:9e:3d:5f:be:ce:ad:d2:9a:8e:
90:6a:5a:b7:c6:03:b5:0f:21:cd:11:96:bd:97:c9:76:b9:62:
28:55:ea:74:f4:58:a3:a8:a8:16:03:41:76:f6:3b:4e:33:e4:
7b:dd:d8:3d:b4:32:15:e1:d2:20:a2:bd:9b:fe:1b:dc:11:a6:
6a:eb:61:a7:e2:0a:04:05:45:10:4a:a9:61:f9:2f:5e:be:c9:
79:6f:d9:f6:7b:ba:31:b3:a3:8d:ea:5b:88:f9:82:be:0f:f2:
72:ed:93:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:56 2025 by rpki-client