Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa
File: 91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa (raw, json)
Hash identifier: ymxOvnBGbaRp08MLIIpgQx4ysDPb7e0sFrr3BqKOMv4=
Subject key identifier: 3E:E0:C3:CB:1D:3D:00:76:1E:FE:08:43:66:26:CE:F6:6B:55:77:02
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848143A82A97EEA5669AC3E2F80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 3477
IP address blocks: 192.67.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:82:a9:7e:ea:56:69:ac:3e:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c9c5547c-0dcb-42fc-84f4-69eea90113e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:e6:e5:61:ef:8e:8c:72:bd:96:29:c0:4f:
21:96:ff:a8:88:56:bf:9f:8c:78:26:1e:4b:a9:32:
12:36:aa:e3:00:40:bf:b9:66:ce:bc:17:55:d8:c4:
82:40:e6:cd:a3:36:0a:0c:bd:74:49:a7:dd:7b:72:
b6:1b:29:e1:8f:fc:cb:15:fa:dd:de:96:46:11:ee:
d8:65:d7:25:d3:fb:a0:90:ce:f1:19:d5:05:93:b3:
32:6b:fc:54:5c:74:79:f2:4f:7d:0c:26:54:67:61:
e1:85:b2:ea:c6:7d:79:22:0c:e0:1d:03:72:3b:c1:
c1:c4:28:be:53:13:4e:16:2f:c1:31:55:64:26:3c:
a5:d3:f5:ff:0f:b6:12:43:22:27:03:d9:84:08:60:
9a:07:92:7f:96:9b:31:80:d5:d3:86:32:b4:df:a8:
97:2a:73:be:b6:3e:0d:f2:8e:ca:e6:21:55:c4:d7:
18:ae:27:18:66:a8:b5:ae:96:7b:f1:e1:29:77:39:
02:93:5a:1c:37:a4:3b:68:c3:a4:8b:81:ac:e9:c8:
a3:95:a2:f8:3d:df:a2:35:93:c9:f5:10:30:d3:6e:
16:29:f6:98:81:2c:2c:ac:59:81:d3:fe:e0:32:32:
1d:d0:61:1e:8e:e9:46:0b:31:1a:75:d9:fd:b7:a6:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E0:C3:CB:1D:3D:00:76:1E:FE:08:43:66:26:CE:F6:6B:55:77:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:0f:6a:b0:23:80:a5:92:cf:a3:64:3e:a9:a5:20:98:2e:49:
af:8f:97:f6:74:5d:ab:e4:7e:4b:c6:4c:cc:0a:1e:bf:67:19:
d1:46:cb:d7:22:fb:69:34:c2:bc:6f:6d:40:86:f6:cc:d4:ad:
c8:77:cf:37:08:9a:f3:53:86:8c:2f:a5:b9:d1:da:39:c8:e9:
5e:e9:5f:d9:87:48:69:88:64:54:35:af:5d:d0:6b:94:6d:7a:
58:2d:10:27:c1:82:09:05:3a:b3:86:79:ed:2a:03:73:b8:b3:
ad:8f:14:40:31:86:dc:ce:39:2e:a5:ac:52:3a:5e:92:bb:69:
f8:f7:ac:5d:81:a0:d4:92:56:c1:fe:19:02:6d:05:6f:8c:9f:
32:d5:c6:18:77:c7:2f:7b:18:64:96:76:8a:ba:e2:cf:df:7e:
13:30:78:0a:b8:7b:58:03:47:f0:fc:ba:ce:82:79:b5:9b:3a:
83:af:32:53:7d:36:d1:98:4f:98:62:8f:98:4c:f9:ee:e3:30:
51:2d:b5:bd:26:64:e8:89:25:62:09:bf:30:0d:6f:33:0e:20:
5e:41:b9:c5:6d:2d:a3:09:52:9c:bf:bf:ec:b8:f9:65:64:75:
52:ec:13:66:44:97:1c:23:90:42:ec:98:03:a3:8b:b8:7b:93:
32:da:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:24:35 2025 by rpki-client