Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/cce538a1-d9ec-339a-9ae0-ed814da96b5d.roa
File: cce538a1-d9ec-339a-9ae0-ed814da96b5d.roa (raw, json)
Hash identifier: T2pWIhnWDF+uz0P3Hc21SAOy9/mlr7Bgpc4KWWR38k8=
Subject key identifier: C5:0C:8C:03:0C:73:96:30:D8:DF:ED:60:54:7E:29:45:17:1D:84:B9
Certificate issuer: /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial: 010D0C9F43285847E094C326761764293743B0C0
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/cce538a1-d9ec-339a-9ae0-ed814da96b5d.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 19442
IP address blocks: 192.25.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:c3:26:76:17:64:29:37:43:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=809ab4bf-b097-421f-a539-6263c16bf964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:9c:e2:2f:96:fa:98:b1:06:c3:ac:9b:27:
d9:80:9c:90:3b:ab:12:bc:75:9b:66:ac:e4:a7:ee:
1f:c6:29:13:6f:a4:02:df:03:88:b6:35:d1:58:ac:
d2:39:4d:8e:fd:4a:2a:ee:8b:96:8c:ab:fd:0a:69:
75:4d:dd:9a:68:74:10:7a:cd:11:86:d1:ae:6f:5a:
3a:96:6c:b6:7b:00:ec:80:04:0b:5b:6c:19:48:2c:
e8:58:cd:2a:c5:a7:5e:af:6c:31:29:d9:65:d9:ad:
c6:5d:d1:b2:a8:55:8d:a5:d6:af:ed:4e:84:a2:9e:
b3:9c:8a:ad:df:b8:cc:c1:3a:66:00:00:c2:1c:d7:
32:34:8c:19:40:8b:f5:71:0e:cc:7d:00:2a:90:53:
4a:d2:03:ed:72:26:63:69:c2:82:25:90:50:7d:1f:
75:1e:ed:da:fa:40:c5:b9:ec:33:3a:1e:0d:f0:2b:
32:e5:5d:ae:1a:02:ab:c7:08:73:ae:c3:ea:ba:28:
b2:d3:19:ae:bc:fc:53:06:cc:db:d4:1b:5b:c3:75:
3f:08:38:d3:86:e7:7f:79:2b:21:6b:73:94:25:de:
b1:ff:36:af:25:87:de:a3:0c:39:5a:1e:6e:a7:c5:
2f:88:38:25:d0:dc:a2:fa:b6:27:9b:ac:51:7a:d0:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0C:8C:03:0C:73:96:30:D8:DF:ED:60:54:7E:29:45:17:1D:84:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/cce538a1-d9ec-339a-9ae0-ed814da96b5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
X509v3 Authority Key Identifier:
keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.25.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:b6:00:70:cf:17:15:8c:53:a0:36:27:c5:d0:08:06:af:ee:
aa:8f:15:df:43:1d:e6:3d:bb:40:40:0a:ca:62:6e:5a:fb:cc:
a6:2c:96:d9:72:cd:01:71:bb:48:fd:7c:8a:2a:45:47:5b:a0:
09:23:7e:50:17:fb:55:50:51:80:f6:79:de:cc:c1:cc:9f:c5:
a0:d8:5f:7b:d3:7e:f8:27:e5:34:78:01:5c:65:7b:b9:7e:3f:
15:0f:90:27:eb:70:c2:65:ca:13:0b:f5:aa:71:06:a1:a2:57:
79:92:b8:88:d2:17:30:50:d0:b5:f9:4b:70:a5:bc:44:67:60:
2b:3a:40:86:a5:c1:d9:f9:04:f1:59:d9:24:22:26:54:06:b4:
e1:aa:84:03:17:85:be:eb:16:c0:cc:f4:aa:c2:6c:96:50:34:
04:ae:07:dd:37:e1:1f:18:85:cc:68:e5:a8:0b:36:00:16:92:
fb:f4:56:60:b6:ac:91:27:90:b4:01:e8:64:59:94:df:65:20:
f8:23:4c:9a:d9:5d:aa:dc:60:f6:53:00:48:6a:28:44:5e:34:
b3:a0:e9:56:87:97:b1:ff:db:76:43:7c:0b:e9:97:bd:f9:17:
06:e3:69:4b:88:42:a7:51:e9:7a:2d:4f:93:4b:9c:8d:2e:83:
ff:e0:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:45 2025 by rpki-client