Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/67327c68-e5d6-3627-85b7-1a55250b5551.roa
File: 67327c68-e5d6-3627-85b7-1a55250b5551.roa (raw, json)
Hash identifier: rBUFuZthMaRHq9HJFvPlGuixWIW/S9U4+Q+w40EYnCE=
Subject key identifier: 12:7D:D1:B2:35:77:AB:C2:2B:B2:E8:7A:1B:4B:30:4F:15:4F:14:9B
Certificate issuer: /CN=a92da870-be06-471e-89b6-f5063eb7350b
Certificate serial: 010D0C9F432858487755E6ED79617252088FD680
Authority key identifier: A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/67327c68-e5d6-3627-85b7-1a55250b5551.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 397050
IP address blocks: 168.149.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:e6:ed:79:61:72:52:08:8f:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92da870-be06-471e-89b6-f5063eb7350b
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=7c951bf2-ca45-488d-a94a-101a2951d61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:b5:bb:6d:de:8f:25:45:f2:91:58:70:55:
9e:f0:0b:7f:c9:ef:62:ca:df:4e:9d:87:1d:b3:a1:
1d:bf:33:3d:cc:a4:46:52:6a:67:42:60:a3:3e:00:
98:a5:b6:4d:21:8e:9b:4d:61:53:fa:3c:4c:82:99:
ae:81:7c:f1:7c:2e:e0:86:b9:ba:19:2b:e2:b2:08:
3e:2a:56:ba:1e:ee:19:04:ff:1f:f4:5a:d8:92:78:
a1:86:df:bd:44:6f:4f:af:9e:6a:cb:5d:58:2c:21:
86:20:08:66:ed:d0:c6:48:5f:c1:e0:58:b5:68:0c:
58:ee:10:24:1e:3c:2d:44:7a:3d:17:80:fd:5f:5c:
a0:02:44:45:3f:a9:1e:99:1e:2f:26:fb:aa:4a:b0:
c4:b2:08:bc:36:4b:67:0a:ff:2e:0d:36:ec:c7:e0:
5f:61:f7:65:0a:cb:fd:5c:45:70:49:48:6b:3f:af:
d8:cd:b8:e5:3e:e9:6c:0c:c7:d1:e7:b8:0c:6a:0a:
32:0d:4e:0f:a8:09:41:19:1f:ee:01:07:31:8e:f2:
8d:a4:ee:78:c2:41:34:84:da:75:de:6e:f4:b7:ac:
f2:0e:9b:13:9c:a1:0b:4a:7a:4e:59:b8:93:c3:5c:
5a:71:37:88:1e:43:5a:e1:60:f9:b3:46:73:47:da:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:D1:B2:35:77:AB:C2:2B:B2:E8:7A:1B:4B:30:4F:15:4F:14:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/67327c68-e5d6-3627-85b7-1a55250b5551.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.crl
X509v3 Authority Key Identifier:
keyid:A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer
sbgp-ipAddrBlock: critical
IPv4:
168.149.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:97:80:e2:3d:f6:35:af:5d:ed:67:a5:c1:fe:c5:49:5c:78:
5e:62:76:b0:86:b1:e1:34:43:84:d3:16:32:f0:5b:b9:f9:b2:
46:b5:1a:0e:65:d0:3a:96:78:a3:d1:2d:d2:fa:ee:b5:16:36:
46:e7:5a:2c:50:f3:db:81:21:ae:0e:ac:de:dd:84:54:93:3e:
0d:fe:df:53:1a:e2:00:6d:9c:16:d3:cd:6f:53:36:9c:11:28:
69:68:48:f0:fd:24:27:a6:62:34:7d:f2:f7:db:c9:6d:86:14:
d2:37:fe:d8:e8:0d:3a:e2:ce:6a:a3:03:23:ff:e0:2c:47:b6:
8c:74:7e:ff:ef:a8:b5:ac:89:6c:4a:6b:c9:b0:ea:36:84:c2:
73:93:db:a9:35:78:1f:0e:76:ba:7f:4e:ac:b4:45:4f:aa:22:
a0:ee:f0:ee:2b:81:ac:2e:9b:18:c5:fa:53:93:23:68:75:79:
20:38:ce:43:57:2a:ce:a2:f8:1b:8d:3e:18:1d:24:fe:24:2b:
d7:ad:b5:f0:c0:98:3a:5a:4d:71:3b:eb:b1:2f:af:27:f1:ba:
78:bc:fb:f8:05:cf:df:a3:8c:0b:4d:ab:c0:d8:6e:41:04:3f:
a7:1b:3e:1f:d3:1b:95:a4:c9:6b:9f:68:da:e8:96:81:d9:0e:
34:93:14:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:34 2025 by rpki-client