Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/12e8f2aa-b31f-343f-ae06-06df3af584f0.roa
File: 12e8f2aa-b31f-343f-ae06-06df3af584f0.roa (raw, json)
Hash identifier: oe88ZXmfeh/VaVYuKfMsHq34RPkX82WNHayKZnMmBwQ=
Subject key identifier: 68:8A:12:5B:64:E9:F9:DE:4D:F9:EC:7B:D3:50:E2:2D:CE:29:5F:41
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F4328584827C53FAFA2853DF24157E900
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/12e8f2aa-b31f-343f-ae06-06df3af584f0.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 396998
IP address blocks: 141.193.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:3f:af:a2:85:3d:f2:41:57:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=f89f4366-94ee-4641-aacb-7308f5d8720c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:54:83:38:fe:10:f9:69:12:b5:8c:1e:19:
52:10:d8:a7:17:0b:2a:5a:50:54:e8:ad:4f:88:90:
e6:a8:75:a9:61:19:96:fa:8f:a2:a4:4f:a3:31:5a:
6f:24:d1:89:62:18:8e:4d:85:54:3e:8d:7c:f2:68:
9c:ed:42:91:32:15:7e:55:bc:52:89:ef:2a:b1:2d:
81:46:f1:db:dc:01:fb:c2:fc:5f:9a:bd:aa:61:28:
16:80:e6:a1:6b:82:24:1d:75:00:67:13:ac:26:b4:
f9:99:a6:76:33:f3:5b:51:e2:c2:d6:fe:4e:25:f1:
74:3e:cb:cc:e1:08:71:a6:ce:7b:9e:d9:1b:a3:c8:
ca:10:a9:e9:ab:70:44:ac:c0:d1:f5:ba:8f:97:90:
a0:59:21:36:21:13:bf:3d:74:88:5a:e6:a1:72:8e:
44:2b:a5:24:db:c6:a7:fc:0a:e8:e1:11:4a:16:ce:
e3:b0:ff:f3:7e:d5:29:7b:b1:6a:b3:63:5d:6f:c6:
32:be:c8:12:43:49:f0:13:a7:7a:2f:8b:c8:58:b9:
92:6f:eb:15:45:11:86:e0:32:6e:24:f0:76:1b:22:
42:d6:e8:9c:b0:08:66:1d:96:4b:61:58:fc:d5:2a:
1d:a6:21:0b:99:87:ef:1c:49:59:53:df:31:ca:92:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8A:12:5B:64:E9:F9:DE:4D:F9:EC:7B:D3:50:E2:2D:CE:29:5F:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/12e8f2aa-b31f-343f-ae06-06df3af584f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:2b:1d:3f:cc:a0:2b:66:ea:b0:76:d6:d3:eb:20:57:55:22:
44:c5:f1:b4:f6:04:1a:3d:33:c6:0f:86:2d:18:08:a8:05:ec:
71:61:8c:d1:5c:90:de:cb:38:a1:35:ba:62:c5:ec:09:fd:b1:
bb:37:15:f0:bd:c1:47:18:72:60:f2:fd:56:04:e1:0b:3b:cc:
4e:94:2c:72:93:3d:28:b7:cc:14:a3:68:fe:11:a4:fa:b8:46:
c0:b6:7f:8d:68:84:d8:fe:83:b8:5e:e5:73:05:7b:ba:b1:b5:
3b:47:62:7e:e8:69:68:c1:94:12:85:e3:66:3a:b0:9b:02:cd:
d1:ec:a4:f3:32:e2:99:c2:ee:f7:d9:28:1d:47:e5:00:9c:76:
f4:16:fe:41:3d:48:62:81:85:eb:67:0f:ab:b0:24:41:c1:3a:
02:1c:83:a5:17:bf:f5:2d:6a:83:d5:5f:30:a5:11:73:bb:e0:
45:e7:e2:01:a6:22:a0:de:e8:67:1e:68:c8:d1:53:fe:2f:ee:
a9:02:89:cd:36:e4:aa:13:5b:64:d0:7a:04:99:bd:f1:f6:b6:
a9:c9:17:46:c1:fd:2f:cb:9a:88:e0:c5:1a:e1:f4:9b:7c:13:
45:bd:d2:f3:a0:cb:ec:18:3d:36:1f:0e:09:d5:85:11:07:93:
4c:60:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:25 2025 by rpki-client