Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d76eeb79-598e-30a0-b720-84a0c6899a02.roa
File: d76eeb79-598e-30a0-b720-84a0c6899a02.roa (raw, json)
Hash identifier: ws83z22BoMDTD++UadDnROhvqfS/nU4gkJMJNZxKJYI=
Subject key identifier: 5B:2A:C7:87:06:56:24:C7:8F:CB:10:AD:5C:C5:B2:2E:A5:A3:66:67
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285848530AF245791F321E1A4F74A8
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d76eeb79-598e-30a0-b720-84a0c6899a02.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 62651
IP address blocks: 192.200.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f2:45:79:1f:32:1e:1a:4f:74:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=5a7d12f0-c738-4aa9-84ed-e9ccce74b36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:b3:51:16:ec:ff:ef:0d:a0:5f:14:61:11:
17:6d:01:65:a8:33:41:cf:da:95:b2:a1:b0:bf:bc:
66:c9:64:02:21:03:81:55:a4:c7:09:b8:39:7c:e2:
11:86:ff:2c:b2:8f:02:e7:5f:3b:5c:b9:cd:86:a5:
ed:5e:82:f3:b1:6f:ce:ac:8f:5d:67:30:fb:35:56:
75:c9:ea:61:54:cc:b2:d8:17:c3:5f:79:9f:60:81:
0c:6d:85:22:d6:06:13:24:89:43:ef:e4:a7:26:22:
ab:5c:ef:ec:56:9b:6e:3f:17:e6:63:f0:c7:ef:e7:
93:1b:e8:08:84:e0:1f:b9:52:9b:24:6d:af:09:77:
2c:a8:50:7a:d7:d2:43:67:40:5a:ec:a5:4c:8d:73:
c8:1f:97:c4:5f:18:5a:b8:f0:f8:85:6c:97:92:97:
53:d5:37:fa:3b:61:62:a1:c4:9b:48:ee:44:b0:3d:
85:27:64:51:4a:f3:2c:ca:93:3a:23:ce:87:1c:4f:
79:1b:fe:e0:30:9f:aa:37:f3:49:07:c8:c0:1c:85:
f8:25:b8:9a:b2:d3:0b:75:58:4f:f0:05:75:c4:e2:
1e:2e:b3:b1:94:b3:d7:a5:c6:a4:bc:ec:0a:1d:dd:
91:32:ca:5d:50:68:19:c3:33:b7:1c:22:69:ee:7c:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2A:C7:87:06:56:24:C7:8F:CB:10:AD:5C:C5:B2:2E:A5:A3:66:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d76eeb79-598e-30a0-b720-84a0c6899a02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
192.200.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:cc:75:b5:fa:c1:be:b6:ac:67:53:f1:ca:f5:8b:7a:96:a4:
c0:67:1b:88:2f:c1:32:1c:99:43:5d:29:e9:c4:52:a4:2c:58:
4a:1c:f0:6b:f2:f6:a1:68:28:54:4b:37:12:14:10:8e:ac:5f:
dc:96:60:d2:56:02:7f:1c:c9:66:11:99:03:d2:2d:38:bf:dd:
d9:c4:6a:5d:6a:84:4f:13:7c:fe:4a:b5:f3:e8:67:59:50:c9:
0d:7c:c1:35:82:c5:24:9f:0d:9a:6f:70:26:f4:47:34:04:ab:
b2:dc:5d:f6:c1:6f:de:f7:aa:87:fd:96:f3:07:66:77:2d:3f:
cc:82:72:e6:49:db:25:38:3a:dd:26:82:16:5f:2e:cb:9f:47:
96:ba:3e:bf:2c:f4:21:b7:f5:03:ee:c5:37:a4:93:1a:df:85:
73:95:1a:f1:56:53:d5:4b:88:0a:4a:c9:1b:ba:b6:0a:1a:3b:
77:98:16:f1:3d:e2:6f:6a:0d:a1:9a:54:66:8d:fa:5e:2a:e6:
52:43:92:4b:e3:56:71:2c:a9:4f:b1:59:39:cb:aa:b6:b5:94:
67:3e:86:96:e6:e5:6f:e2:f2:e6:ba:36:9d:16:ce:59:f8:f1:
7b:0d:ae:04:17:32:32:4b:d8:1e:47:fa:43:68:f5:12:ef:08:
d7:c7:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:22:18 2025 by rpki-client