Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/56888ec3-91ad-304f-a1c5-2db34a218a54.roa
File: 56888ec3-91ad-304f-a1c5-2db34a218a54.roa (raw, json)
Hash identifier: 8kWpgnk86CsPtEX/b9KQ6xGpDMP2swWWeyl3RIoEvWc=
Subject key identifier: 10:9A:8E:2A:D3:3E:5D:4A:B2:9A:55:C2:3D:BD:E6:B0:5E:2A:37:EB
Certificate issuer: /CN=d3878a5b-a112-41cb-867c-f6fae3f22d52
Certificate serial: 010D0C9F4328584827C5454EDF79032368488160
Authority key identifier: 7B:F3:AB:50:8E:44:E2:FC:50:F2:84:43:29:C6:66:F0:82:EA:4E:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/56888ec3-91ad-304f-a1c5-2db34a218a54.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 54172
IP address blocks: 192.154.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:45:4e:df:79:03:23:68:48:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3878a5b-a112-41cb-867c-f6fae3f22d52
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=825d7c46-f316-4041-ba30-d162d6c2c483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:79:ea:d8:62:ef:cd:b6:5a:77:58:91:ae:
71:ae:bd:24:ba:d6:f9:02:3a:d8:75:d5:c8:fd:b0:
49:49:9e:b2:29:d2:01:05:55:0d:44:e6:99:fb:ba:
14:e6:2f:d6:1a:1a:b6:28:fb:36:0e:9f:93:12:72:
19:f3:bc:06:f6:0b:66:f4:1d:d9:4a:fd:f5:cf:aa:
21:9c:67:0b:bf:33:89:6f:51:9f:b7:52:a2:13:43:
ce:72:e3:22:09:3f:03:c4:c2:2f:d0:5c:eb:ae:97:
ef:ea:45:fe:68:0f:81:a7:3c:41:45:86:31:81:7e:
23:6a:66:86:c8:63:b8:4f:59:da:b8:df:1f:d5:60:
cc:ee:d2:0c:9a:19:cd:c4:d2:f3:7a:2c:01:18:04:
8c:f3:d4:be:17:71:63:f4:0b:f4:1d:73:42:42:e3:
6e:58:db:0a:1e:4e:4c:d3:e7:92:94:3a:d3:8a:6b:
20:15:df:d6:2e:fb:41:c2:45:e6:05:2a:50:1f:52:
ee:93:9f:d9:37:66:aa:19:45:b9:0a:f7:dc:51:e2:
9d:31:31:2f:79:98:26:ba:9e:6a:e9:3f:77:27:e5:
47:58:13:03:47:e9:e2:af:0e:d3:df:22:71:cf:b6:
cd:c1:fd:b4:9e:8e:21:88:d8:cf:2a:85:68:d2:30:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:8E:2A:D3:3E:5D:4A:B2:9A:55:C2:3D:BD:E6:B0:5E:2A:37:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/56888ec3-91ad-304f-a1c5-2db34a218a54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.crl
X509v3 Authority Key Identifier:
keyid:7B:F3:AB:50:8E:44:E2:FC:50:F2:84:43:29:C6:66:F0:82:EA:4E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:6f:e6:61:29:b3:d4:b4:41:89:95:9f:03:9f:6d:c3:92:bb:
42:ef:03:68:99:73:cd:81:af:77:5c:b7:4c:27:f3:95:c7:c7:
19:23:fc:5c:68:32:bb:e7:18:62:38:1e:ee:be:24:c0:2e:ff:
00:bc:79:fe:ff:dc:60:37:25:47:d6:89:3a:5c:1d:14:9d:be:
17:e3:e0:8c:72:a9:81:82:96:3e:e0:b3:41:24:f5:6c:60:b5:
8c:91:e9:0c:43:0e:08:58:2a:8b:53:51:ad:ac:87:e7:52:0e:
4e:b5:d0:d5:e8:84:e1:dd:5c:44:bd:dc:04:87:6c:6b:3a:22:
81:01:76:ef:2b:94:c9:d2:fc:01:87:8b:91:6e:d3:a4:fb:30:
30:38:6b:42:12:2b:85:c2:1b:49:e3:58:8d:98:a5:7b:df:01:
75:71:91:5b:62:a1:3e:02:54:e2:2c:36:94:39:95:2a:52:44:
cf:73:6e:07:a4:b3:f3:39:dd:81:24:06:2e:6e:38:4a:d7:45:
59:fc:43:d3:40:b5:ab:5b:c1:e1:cf:22:4d:22:00:57:d6:b1:
8f:65:33:20:71:8c:54:ee:20:b8:3e:1a:1c:62:0d:30:67:4e:
4a:33:c3:3f:ae:89:ea:88:48:00:2b:2e:0a:42:d3:85:8f:9d:
4d:a0:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:48 2025 by rpki-client