Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
File: 1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa (raw, json)
Hash identifier: OxrnP67m2IPti7N7MyCoYeFM1z0BXZUlRQrFKladnzk=
Subject key identifier: 27:28:05:07:99:44:BB:B1:5C:A1:EE:A9:49:35:27:19:08:83:E3:86
Certificate issuer: /CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Certificate serial: 010D0C9F432858485F9AE514F640A3AA5F1DEB60
Authority key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 61317
IP address blocks: 192.48.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e5:14:f6:40:a3:aa:5f:1d:eb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=c1d01a00-9031-4156-8643-d33517aef54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:b7:4c:41:bf:68:91:be:fa:b7:78:1e:05:
c6:be:e4:00:4c:30:35:e2:e7:8d:a6:ea:d0:04:31:
f7:e1:32:aa:2a:2b:52:d5:9b:ef:a4:cd:23:da:e0:
84:7e:06:e8:fa:da:4c:45:cf:cc:b9:91:b7:bd:cc:
17:d1:06:2b:e6:bd:73:70:e3:c3:a3:90:f0:22:30:
de:03:23:9f:48:a3:c2:3b:c4:fd:45:38:3c:01:1e:
d8:17:48:de:5d:02:76:18:22:3b:84:b3:a8:dd:9b:
51:b6:5f:8f:a1:e6:ff:61:13:d4:8a:d2:70:9d:1f:
98:8b:0e:0b:7b:a9:e8:a9:b6:b1:cc:37:8f:11:b2:
ed:c2:a2:fb:ae:0f:43:fe:ca:6a:3a:d3:c7:18:51:
b7:0f:3b:2f:d0:96:53:76:52:1c:5a:b2:8a:ce:b3:
ae:81:de:ca:51:f7:68:ac:80:74:c9:97:19:a0:3a:
b7:ad:d2:8f:40:27:5f:05:6e:f5:18:20:75:cf:32:
88:f7:bb:62:b6:79:be:0d:40:f8:62:fb:91:38:d4:
ae:cf:3b:59:17:6d:d3:37:02:df:04:fa:3e:a3:80:
e7:83:1c:be:41:1f:f8:c9:d9:84:c0:1b:c5:d7:8e:
06:10:44:84:c1:8c:8d:9e:fe:67:b2:2e:8b:2a:42:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:28:05:07:99:44:BB:B1:5C:A1:EE:A9:49:35:27:19:08:83:E3:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl
X509v3 Authority Key Identifier:
keyid:17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.48.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:a2:fb:9f:e6:b9:11:94:d6:0b:97:73:5b:7e:a9:8a:a2:41:
96:a3:9e:8f:52:ab:de:d8:7f:93:ec:5a:ad:1e:63:ae:ef:d6:
43:b1:b0:60:6c:fd:c3:72:96:ed:ee:9f:e1:61:15:5e:7b:2b:
0f:68:67:32:73:11:2e:2c:77:24:3b:70:ad:c6:96:f4:55:37:
9a:2c:d3:e5:a7:44:60:43:b5:d5:3e:32:99:15:11:ca:db:a2:
f1:f8:ed:21:62:10:77:0b:8c:fa:aa:6c:ae:a9:72:4a:a7:f9:
3f:92:8a:d4:18:a4:cb:bc:6c:c0:58:a8:10:3e:99:00:99:9a:
07:92:5c:56:b4:8c:87:c5:f9:14:4a:e6:0b:9e:1b:7d:5a:b4:
a6:6f:15:d2:a8:d0:27:4c:aa:20:a5:5b:cb:ab:70:ae:23:6d:
96:ed:5a:4e:fe:c1:0f:e4:50:ec:a1:fd:88:0d:ab:7b:f7:9b:
ec:86:d7:0c:4b:f2:2a:27:8e:f8:3d:80:f9:0a:c9:89:e2:e4:
3b:14:b0:44:17:c0:0d:62:fa:6b:8d:ab:2e:be:14:ac:f5:3a:
8c:8d:ca:d4:1b:69:ef:19:39:2a:0a:e6:ec:89:11:a8:1f:fb:
39:7b:d1:b7:99:d9:44:c1:91:bb:ab:b2:50:14:4a:30:32:a0:
b0:ee:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:33 2025 by rpki-client