Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b53d7f67-0f37-3afb-915c-10accdd43450.roa
File: b53d7f67-0f37-3afb-915c-10accdd43450.roa (raw, json)
Hash identifier: lmLrzpi6i3SlDbJPNwyIehZr9LDQsS9bBjshgCNgLoI=
Subject key identifier: 68:DB:7B:E8:6B:57:49:28:9C:73:AC:53:3D:CD:D5:82:4C:96:71:52
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848090FA20196BD62C70D071D00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b53d7f67-0f37-3afb-915c-10accdd43450.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 3477
IP address blocks: 192.64.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:a2:01:96:bd:62:c7:0d:07:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=1dfa935f-aa66-441f-a9ec-c95d9b309e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:95:b3:fd:6c:ec:c3:d5:fb:c9:8b:4b:10:e7:
16:b1:5d:c0:52:aa:41:c3:9e:3a:33:f6:69:8a:96:
1f:4a:e2:80:25:30:59:04:4c:83:c9:88:3f:35:e0:
c6:89:d8:71:22:8f:f8:60:d4:6e:67:6a:c6:f8:8e:
a6:02:94:ac:35:0e:24:ac:ed:01:89:f0:22:53:66:
ee:e9:0a:66:40:e0:ae:c8:1c:b3:cd:b9:1b:9d:d9:
63:8a:f5:b5:28:af:40:96:28:e3:4a:75:85:0f:f2:
2f:a8:ea:3e:35:42:3c:15:bc:a3:ad:28:18:ed:11:
d9:b1:ef:07:c6:31:24:06:af:3f:a1:f4:63:95:fa:
42:f8:04:23:49:43:f6:80:f7:69:4c:0a:dd:a7:49:
6d:10:da:39:fc:0b:7d:3d:cd:3e:d7:1d:24:91:80:
6d:c4:71:6d:b9:d5:b3:f1:ed:20:54:a2:75:ac:bb:
f9:f2:aa:c8:e2:71:a6:81:34:a4:d7:43:28:5f:7c:
58:67:a6:e1:35:d3:9e:da:cc:91:e9:32:c9:20:37:
ff:37:ec:2b:d1:f8:ba:1b:aa:ac:93:9a:19:b5:23:
0a:47:f2:66:00:2b:76:5f:08:b1:3a:d0:55:d1:f3:
b7:a1:dd:15:6e:c7:26:ae:08:05:30:4c:43:fe:d2:
17:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DB:7B:E8:6B:57:49:28:9C:73:AC:53:3D:CD:D5:82:4C:96:71:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b53d7f67-0f37-3afb-915c-10accdd43450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:5c:3a:53:42:b7:4b:22:d7:01:17:df:b0:13:96:39:cf:79:
3b:07:1f:2a:4c:4c:11:e7:ad:aa:e1:a5:85:7f:56:47:24:70:
78:73:1d:ce:1b:76:bd:e0:34:60:04:0e:7d:55:8a:06:02:3c:
54:5f:e1:92:c0:0d:be:0f:10:71:66:b5:de:fd:6e:a6:fb:2d:
aa:b4:b5:c2:ae:53:65:d2:d9:80:68:9e:af:7f:39:06:3f:ef:
70:97:89:ad:0d:5c:6f:65:43:df:04:1b:1e:47:de:20:1c:90:
c4:db:34:2e:55:3c:a3:c5:e8:c3:4d:01:22:b6:ed:9c:2f:96:
c0:5f:92:1b:ae:03:33:43:d7:98:6b:55:46:b8:a8:09:1c:3a:
49:1b:d7:77:cf:91:de:9f:56:fc:66:85:a4:1a:0a:18:71:2d:
5c:1d:86:ca:e9:3d:d7:92:f0:60:a4:78:20:48:80:76:52:39:
a4:73:e3:f5:5a:c5:f8:22:74:4e:22:5e:ee:90:a3:44:d5:bf:
16:f0:58:ad:b3:ca:68:95:a5:6c:6f:4a:06:60:c7:85:e2:7b:
db:c3:3d:f3:01:f9:f3:23:a2:3e:fc:43:2a:f7:f8:d9:64:47:
b6:8c:c8:8a:83:4c:ac:b2:2c:c7:41:73:11:93:72:cb:64:2f:
2c:92:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:25:35 2025 by rpki-client