Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/374a1ee7-9d31-3c69-9b87-ae090bfe7db4.roa
File: 374a1ee7-9d31-3c69-9b87-ae090bfe7db4.roa (raw, json)
Hash identifier: sGtQJ4N9bo9UVs1LMP+npujR1yi+aKwQhafYFkje6s4=
Subject key identifier: DD:29:ED:54:71:56:E1:59:BE:C6:16:B6:78:53:C8:D0:C9:F8:4A:59
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584886B07FA16BB76E51D1AEC680
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/374a1ee7-9d31-3c69-9b87-ae090bfe7db4.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 23918
IP address blocks: 192.67.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7f:a1:6b:b7:6e:51:d1:ae:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=01fbb801-20a6-40d3-91aa-219a12276ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ea:a0:88:90:c2:31:bf:e4:71:fd:ac:df:ba:
84:f4:76:4c:b7:e3:cf:40:4a:3e:11:f0:52:46:a1:
44:92:d6:df:97:d7:46:cd:4e:bf:bd:8f:ac:39:53:
f4:89:24:79:0c:ec:1b:19:2e:2a:9d:fe:9d:5d:c8:
6c:c6:83:f7:a4:ca:9a:38:db:f1:8e:77:0f:70:8f:
5f:93:e5:a2:b8:69:ed:e1:9b:71:97:5d:dc:41:25:
2d:56:27:84:71:98:08:1c:77:b7:de:d9:a1:db:79:
55:ed:b4:61:22:ba:d1:c8:f3:1c:d2:29:31:50:49:
06:40:65:cc:1e:4f:79:55:1e:f6:35:47:bd:30:43:
4e:de:53:93:23:da:85:45:1f:16:b1:8b:35:d9:9a:
d4:8b:14:75:cc:5f:c3:3b:c8:a3:7a:00:08:19:da:
39:1c:6d:86:84:25:28:5f:bc:d3:60:58:d4:b7:eb:
df:4e:71:ad:f3:13:cc:87:f6:e8:7f:c3:c8:81:28:
5c:df:ee:4d:f7:5b:21:60:64:e8:86:69:7f:82:f5:
de:e4:81:ea:74:d4:73:48:79:60:aa:15:b4:05:3c:
93:ed:c4:6a:12:df:ce:2f:97:db:39:ef:bf:bc:be:
bd:5e:2a:67:d2:3f:9a:fc:8d:db:1a:7f:d8:f5:77:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:ED:54:71:56:E1:59:BE:C6:16:B6:78:53:C8:D0:C9:F8:4A:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/374a1ee7-9d31-3c69-9b87-ae090bfe7db4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:13:b2:a4:57:e5:bd:cd:29:89:09:56:59:cb:41:62:f5:2a:
dd:03:b8:15:06:13:71:a3:85:c4:3a:de:16:13:75:80:95:61:
80:84:48:b7:c1:f4:4e:23:be:c0:78:a8:30:27:d3:ae:a4:e4:
e5:46:a2:d8:51:45:6f:b3:d2:d0:9a:54:ed:34:96:13:00:57:
d7:08:d7:35:0f:ee:72:5d:84:f8:e7:72:d8:16:d0:f3:de:32:
ec:82:2e:99:6d:11:45:bd:db:1b:0d:fd:c7:d5:d1:4c:a9:47:
0c:3f:16:db:30:27:18:66:62:ac:b0:c5:d2:70:1b:ff:a0:2b:
7f:98:dc:fc:ce:2b:76:24:38:60:d4:6b:95:c2:54:1f:e2:03:
26:10:40:e0:0b:6d:9f:c9:fa:f3:08:77:95:54:22:7c:ee:73:
41:42:c3:29:b3:b4:b8:c9:92:4a:34:7a:01:08:ef:d7:9d:55:
f5:56:b2:18:39:35:1d:b7:62:ae:77:be:bc:77:aa:17:47:15:
fb:34:3e:4f:73:ec:c9:66:67:5a:c1:da:6f:54:30:15:14:a6:
8c:19:79:64:91:a5:01:50:d8:c0:80:38:00:e8:53:66:10:86:
6e:7f:c9:f4:f6:5c:af:2e:f7:26:e0:cf:ff:6f:59:a0:0e:75:
c4:80:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:47 2025 by rpki-client