Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa
File: acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa (raw, json)
Hash identifier: itNBQnqk7qiWQiKhdLjqW2bcwibHvBIFwUN43EZwLx4=
Subject key identifier: 4D:12:4C:63:0B:37:20:D7:E9:77:FA:E8:95:F7:06:7F:84:56:48:52
Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial: 010D0C9F43285848037B6AF972AEC60AFA34D6D8
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 192.161.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6a:f9:72:ae:c6:0a:fa:34:d6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=394e38da-6d0c-46c5-9a16-548a4e15a444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:8e:ee:07:f5:26:62:34:dd:7d:23:e9:86:
3a:62:d1:86:bd:c9:93:88:f4:64:8b:55:fd:94:ff:
06:d8:21:62:95:c5:db:2e:ec:6e:e2:ee:6f:11:6f:
b4:c0:ca:44:e3:e7:ee:6c:9c:29:78:2f:df:d3:38:
4c:03:0d:04:5d:82:a1:d4:67:cb:79:98:49:45:d3:
c1:cc:97:17:02:bd:66:18:6b:53:7a:04:08:c4:99:
e9:4d:c5:b4:b7:ac:fc:72:41:c6:3e:77:95:cc:2e:
44:9b:9c:17:91:9e:6f:91:fa:79:9c:52:64:87:f6:
72:42:6f:5e:d8:1c:c1:9f:60:dd:82:4f:d0:69:ee:
c7:c3:2e:6d:29:ac:d9:21:46:4b:a8:0a:ad:cd:8f:
cb:f3:fd:5c:e3:fd:f8:41:ea:fd:c8:3a:6f:7d:22:
ae:7e:71:ab:b0:13:16:fa:39:fd:a7:a5:c3:45:5f:
fe:a4:b6:a3:a4:55:d2:0e:91:ff:51:9e:b4:fe:ad:
5b:da:45:2f:c3:dc:e1:c9:01:4a:0a:17:9e:25:b4:
1d:71:16:fe:d5:65:f9:2f:56:06:9a:ef:ff:50:ad:
1a:38:c6:63:f7:77:ea:99:3c:21:8a:94:ff:1f:62:
05:ea:97:08:35:b9:57:10:c5:75:49:13:9f:01:81:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:4C:63:0B:37:20:D7:E9:77:FA:E8:95:F7:06:7F:84:56:48:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
X509v3 Authority Key Identifier:
keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
sbgp-ipAddrBlock: critical
IPv4:
192.161.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:11:b4:2b:4f:61:67:41:7f:d0:24:73:64:16:40:1b:a6:f4:
a6:7a:17:8d:94:c5:0a:3c:1b:ae:8d:2c:98:c3:a0:1d:10:9c:
cb:94:19:1f:87:a7:95:d4:9d:0a:c3:26:55:cc:26:1a:68:e4:
98:a9:73:b6:aa:78:59:27:4c:ab:22:b7:44:99:0e:ef:60:d5:
d9:65:a8:03:7c:41:fa:92:7e:2c:f4:0c:bb:fd:65:d4:e2:8d:
09:9b:32:61:d9:b3:ac:9e:87:76:e6:00:b2:bc:0b:52:76:c9:
86:f2:1a:77:79:35:4c:8f:0f:d8:c9:09:bf:81:c1:b9:0f:ce:
72:fa:0a:81:ef:47:a1:68:72:10:62:89:48:dd:3a:ca:8b:31:
57:cb:d3:51:20:5c:1a:d2:46:41:8b:e8:bd:d7:a4:18:01:0d:
0c:73:44:af:e9:8c:d8:2e:b4:80:32:d4:81:66:d3:f5:bb:16:
2a:2f:5f:07:1c:1d:65:3a:ab:19:d2:6b:02:e5:31:f9:9f:62:
c0:f1:21:a6:c1:e5:fe:c7:04:48:c6:d8:85:51:cd:9a:8a:69:
6a:24:f3:00:28:80:7a:11:73:3d:73:b2:36:de:25:d0:e9:c7:
63:d9:1a:b6:27:13:b2:d1:d0:e1:a0:04:42:c1:c6:91:d8:f1:
dd:97:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:02 2025 by rpki-client