Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa
File: 4f49763f-ed78-345f-8b50-e6621c015ab1.roa (raw, json)
Hash identifier: dsF3gdHn9UZUjJFv0IUU72UoEiZRJClNKy1xeTUvFTs=
Subject key identifier: C1:30:D8:3E:E1:0C:3C:4D:53:90:E6:13:FD:F9:B0:AC:A4:AD:C1:9E
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E50673CC81D88B596B476C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 3477
IP address blocks: 192.58.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:67:3c:c8:1d:88:b5:96:b4:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=c9a82a6b-d472-4a47-9d47-51e6e5cb718a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:14:ee:77:43:57:6b:b2:22:d1:28:90:9d:
dd:46:69:73:0f:d9:e4:21:0c:dd:8e:5b:34:c1:90:
2c:d2:b0:6f:f5:1a:0d:6f:c1:18:9e:ee:c9:2c:46:
a7:fd:f8:e6:17:eb:8a:21:3a:67:16:2c:3e:b4:cf:
87:36:e4:53:5d:09:6a:1d:eb:24:f5:85:c2:7b:71:
f5:42:2b:be:93:dd:2d:70:a6:8f:c0:16:d0:e0:a7:
92:90:ea:12:23:ca:5d:61:0c:bd:5b:64:1f:c5:ca:
77:25:8d:41:27:83:ee:3a:d7:0b:32:d8:32:82:9a:
4b:93:88:13:ca:c2:86:72:a5:3d:a9:b5:ea:4c:df:
39:77:8f:b1:34:80:e0:43:e2:49:f7:9b:0b:4e:7b:
9b:a3:89:70:bf:da:1b:de:c9:47:7e:ef:e3:07:21:
e8:d5:c8:6b:27:dd:ce:d1:95:1e:ec:89:66:0f:61:
c8:ef:36:b8:6d:c3:cc:d3:99:fb:26:7e:46:cb:8a:
37:a4:63:4d:7b:fa:b2:6b:57:0b:0c:70:13:d6:f9:
c0:c4:63:77:96:3a:43:65:cf:56:fe:f9:a1:6e:0c:
9e:29:26:00:fc:29:28:d8:7c:9f:fe:5f:23:65:82:
b3:88:88:91:3d:15:9e:83:2e:99:63:3c:53:f2:78:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:D8:3E:E1:0C:3C:4D:53:90:E6:13:FD:F9:B0:AC:A4:AD:C1:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:ac:97:bc:06:e2:b9:3d:10:81:61:98:2e:b4:ec:b7:ab:1b:
43:69:56:d5:ec:40:f6:3a:fc:0d:26:0b:23:d5:03:49:77:3a:
fe:dc:7d:50:3d:0f:21:86:d5:3d:09:66:67:08:24:65:eb:93:
5c:5b:d4:6e:b9:41:88:d6:98:19:45:2c:fb:ac:23:5e:ba:f7:
46:e9:0b:06:2a:3f:fc:0c:23:82:f5:49:06:9c:ea:c4:95:66:
9d:df:ec:c6:9e:4e:3b:ec:93:81:1c:35:d9:a0:c5:4a:93:f2:
99:f9:7a:03:af:85:40:94:7b:77:07:9f:27:35:0e:5f:df:a2:
bb:77:ba:2e:90:96:49:50:95:48:86:85:4a:92:56:87:7f:83:
87:7d:46:66:04:0d:b5:92:31:c1:10:32:49:4a:f2:fd:d5:59:
bd:cf:74:ad:f4:db:b3:40:c3:02:b1:1d:69:ff:7b:b0:f0:3e:
de:75:e1:a6:14:74:10:89:94:24:5c:44:2c:de:41:a0:ca:69:
db:d8:4f:c8:27:37:2a:d0:57:51:b4:ca:96:8a:f0:5f:92:b4:
ec:22:81:4e:30:ef:0d:9f:d8:fe:0c:e2:e1:46:7e:da:1b:e9:
e1:5b:0d:87:c8:61:37:a1:da:98:52:39:9e:69:19:75:0e:7b:
02:d9:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:20:31 2025 by rpki-client