Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/beb39055-851c-3403-be13-88e04d185388.roa
File: beb39055-851c-3403-be13-88e04d185388.roa (raw, json)
Hash identifier: wCxv0nWCZv8819pdBtFZ4lSui4kIsM93ymww5mL54Wc=
Subject key identifier: 67:F3:C9:2B:02:F5:3E:EE:EA:AC:58:7B:CC:CB:CD:60:4E:F8:BE:04
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F4328584875F056EAA3AD23A37FAA9C70
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/beb39055-851c-3403-be13-88e04d185388.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 192.35.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:56:ea:a3:ad:23:a3:7f:aa:9c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=5b546dac-5425-42cf-92ab-a5bc97471e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:77:ce:13:da:39:5f:2a:9e:f3:9e:16:26:
eb:8b:bd:43:9a:f9:63:90:a8:78:10:26:ec:7a:ea:
d6:bf:a4:ce:98:42:4e:f4:be:a1:c0:a2:ca:28:1f:
8d:17:56:d3:85:95:e3:aa:6c:36:a6:f3:ba:34:45:
2e:c3:1d:64:f6:e2:06:94:b3:c4:69:f1:ed:ee:19:
82:c5:5a:f9:d6:99:33:17:31:6d:0f:5c:95:97:45:
ea:38:b4:6a:f1:04:8a:3e:34:3a:7f:3d:53:40:46:
c8:b6:fe:d8:79:be:55:0a:5a:48:8a:d8:39:92:1f:
c3:e4:20:6c:ea:2f:cd:2e:7c:81:94:09:68:cd:f7:
1c:a0:0c:26:bd:4e:c5:4c:da:df:c2:1c:f3:f7:aa:
d6:40:0c:a8:e0:4d:91:a5:dc:34:f1:58:3d:6b:43:
ad:4d:43:31:7a:e4:be:45:9d:5d:f4:be:41:2f:dd:
0e:eb:78:91:e3:9d:00:64:77:8a:27:55:29:2f:69:
7c:05:6e:d4:e5:72:e5:a4:f9:04:9e:8d:f5:9f:87:
e1:f6:d3:c6:67:14:f6:76:21:62:a8:29:5a:15:84:
63:1f:cd:33:fb:31:50:e8:46:74:44:0b:d2:8d:ac:
cf:1e:0c:73:52:ef:24:26:60:6f:de:d3:ea:17:be:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:C9:2B:02:F5:3E:EE:EA:AC:58:7B:CC:CB:CD:60:4E:F8:BE:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/beb39055-851c-3403-be13-88e04d185388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.35.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ae:d5:87:3e:e5:88:c3:80:6f:f5:df:49:48:1b:75:e2:ee:
92:c7:ff:91:3c:b7:c1:c7:3a:08:25:e6:4a:e0:69:7f:6e:01:
ac:8e:5f:03:39:96:ee:be:85:b1:af:82:0f:23:56:d1:1c:9f:
46:a3:00:dc:b1:d9:65:08:ab:4f:62:14:bb:64:f4:29:80:73:
51:b7:ff:1b:85:f5:b2:ca:5a:46:05:0a:43:f8:57:31:ac:86:
8a:05:d2:cb:34:1a:74:31:ff:72:e8:96:0e:f6:40:94:df:4c:
d3:c9:55:74:dc:e7:2f:4f:b6:f1:0a:94:b1:d9:07:e8:bf:58:
7c:36:7f:98:3f:2d:96:76:9c:e2:ef:7a:ba:3c:93:8f:09:97:
1a:08:da:d4:9e:eb:f7:ae:ef:ff:06:eb:5a:d3:0b:70:e3:52:
d0:df:d3:68:99:50:f9:fa:c4:ce:b4:c9:99:ec:1f:7c:4a:38:
95:58:1a:9d:8a:7f:e5:33:d0:22:dc:f9:de:57:16:b3:c1:91:
62:e8:1d:33:15:66:c7:74:17:5c:18:6a:c6:78:64:4f:aa:63:
46:d7:bc:b9:c7:28:ca:04:6a:43:3e:c1:cf:6f:77:26:3a:be:
04:20:ea:29:86:a5:54:f4:fb:d9:11:95:c9:53:00:20:cf:6e:
2c:ad:df:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:55 2025 by rpki-client