Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ef2bba2d-10a1-35c8-b977-16ffbfb685e5.roa
File: ef2bba2d-10a1-35c8-b977-16ffbfb685e5.roa (raw, json)
Hash identifier: 0WqZhVDxNhv5TfFaBcHuc5o2Deje5ToUWfbThv6oevQ=
Subject key identifier: 50:77:B5:75:58:22:34:DD:8B:74:2D:77:93:98:AC:A0:50:B5:79:73
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487325B58C1D3AC5CD056036E0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ef2bba2d-10a1-35c8-b977-16ffbfb685e5.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.68.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b5:8c:1d:3a:c5:cd:05:60:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=75c8ce36-8ba3-4d84-a638-3cedd7f00b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:be:bd:07:86:ee:aa:6f:e3:b3:1a:85:cf:
a6:1a:5c:1e:8e:b4:1c:fd:79:f1:3a:0f:f7:fa:4b:
59:e1:5f:13:0a:0a:db:fa:50:e4:5d:f9:a2:ec:57:
b5:42:70:fc:b2:34:b1:3b:c8:0e:d9:3a:89:6d:c1:
38:1d:59:e6:b4:ea:36:9d:50:19:98:54:9e:fc:28:
68:9d:bf:e1:d5:8c:f7:25:e9:8c:be:4f:28:3a:43:
f7:d9:99:25:39:69:24:22:0b:24:8a:76:9c:0e:e8:
65:74:69:56:89:22:e4:fa:39:96:dd:62:23:ca:4f:
68:5e:84:29:02:aa:89:3c:e4:13:64:1c:10:0e:36:
2b:64:9e:4e:48:7d:79:3c:27:ac:08:96:68:1d:6b:
77:d9:ff:54:f7:ee:12:f3:9c:e9:5b:65:d6:7a:6c:
07:b8:28:ad:f2:5f:e5:f9:5c:ec:6b:66:76:8b:bc:
49:1e:c4:ba:f0:1c:71:8b:ea:45:20:da:f2:ef:83:
fb:10:d9:97:cb:c8:97:ee:c8:81:25:98:ed:5b:76:
92:ea:00:d1:27:14:81:05:5f:f1:43:04:0c:df:55:
64:fe:60:af:0b:b7:ff:04:51:55:ba:9e:94:ca:fe:
29:f8:75:05:b0:36:23:41:64:64:1a:d9:38:69:5b:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:77:B5:75:58:22:34:DD:8B:74:2D:77:93:98:AC:A0:50:B5:79:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ef2bba2d-10a1-35c8-b977-16ffbfb685e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:89:55:8a:23:f5:51:b2:54:f7:42:7d:a4:6c:f9:21:a1:50:
0a:a0:68:ec:46:5b:71:58:f3:fe:5f:a5:93:5d:a1:6f:1c:13:
f8:43:ea:31:a4:f9:1e:9f:65:f1:59:33:bd:64:48:3b:16:13:
56:6e:4b:82:21:d8:f4:5b:a9:32:17:d0:1f:9f:48:80:bc:8a:
6c:2c:4e:da:16:21:ab:90:4d:ba:38:d7:0d:5c:dd:03:3e:4a:
af:1a:23:03:4e:0e:d5:e6:a6:a1:cc:76:d5:42:a7:fd:6c:a1:
74:26:b3:a2:69:b0:9c:08:48:3b:60:8d:46:ab:64:28:4a:d9:
b6:34:6b:be:1f:b1:ea:ac:a7:7d:cc:a8:4c:51:05:ce:35:d8:
14:57:f5:32:c4:18:7a:c9:a8:84:64:72:a3:9a:d2:d3:8c:0e:
73:3f:ee:67:98:3b:a0:dd:18:c6:c8:3b:c8:de:a3:ff:0e:c4:
7b:97:02:d7:2b:13:11:73:49:46:24:8f:b5:2e:66:a4:c7:ce:
7b:91:a9:af:f3:85:19:e8:e8:09:d1:b1:e1:0b:53:6c:7c:ab:
29:33:97:ec:d5:f1:50:3c:1c:b6:71:d1:51:4e:96:8f:96:ea:
ef:a7:3c:88:f3:6a:a1:af:ce:b9:30:fd:b1:da:92:24:c6:76:
d1:98:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:08 2025 by rpki-client