Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa
File: 00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa (raw, json)
Hash identifier: qgwWuOPQSpJ6bUinfUymBWflfrNMzjaKmLrRogtAMxg=
Subject key identifier: 2A:5D:14:5B:C9:21:3A:E9:08:66:FE:B8:CA:DC:0C:BA:75:4B:E7:BB
Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4
Certificate serial: 010D0C9F43285848494568E2C7EAEAA7202FE000
Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 22571
IP address blocks: 192.131.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:68:e2:c7:ea:ea:a7:20:2f:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=473eff97-646f-4b51-9fd9-77157d46911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:f1:b0:b7:87:d0:ed:1a:7b:15:ae:8b:e6:
c4:a4:0f:d9:4a:5b:5e:66:66:48:b2:a7:3b:9a:86:
93:f7:23:fa:fc:dc:b7:1b:a4:89:66:98:12:fd:d9:
79:58:cc:0d:cb:b3:4e:d1:7c:4f:ec:0a:bb:04:0f:
d4:07:53:b8:6f:73:ba:75:ed:8a:13:b4:4a:5a:46:
9e:a3:75:05:ef:ce:c4:66:25:b3:54:0f:58:de:3a:
94:c4:6a:14:3b:95:1d:28:24:60:c3:cd:a3:95:78:
c8:05:59:16:3e:f8:e8:55:4b:08:0a:e7:e3:13:99:
3a:3a:a6:56:ba:65:db:06:dc:b9:f3:93:aa:2e:08:
cb:a9:b3:1a:fb:55:c2:8a:ed:29:05:da:5a:25:6c:
18:ce:5c:82:b7:26:6a:d7:77:6a:50:f2:e9:10:b8:
d4:f2:9f:8d:10:c5:b6:98:9b:f6:cd:52:bf:1f:1a:
96:e4:f9:c3:88:ca:c4:61:1b:53:d4:0c:0a:5b:f5:
d3:b4:3d:94:8d:bc:da:ba:b3:21:21:c9:de:8b:49:
3b:0e:fb:30:37:f4:ab:09:c0:93:de:4f:d0:8d:39:
e9:8f:81:09:7d:56:f7:ad:77:fe:f7:fc:35:d5:a6:
7f:2d:4f:46:d5:68:73:9d:29:a2:bb:b3:70:26:bc:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5D:14:5B:C9:21:3A:E9:08:66:FE:B8:CA:DC:0C:BA:75:4B:E7:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl
X509v3 Authority Key Identifier:
keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.131.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:76:96:5c:f6:44:3a:08:73:54:04:e8:90:84:26:29:c1:4e:
c8:62:7a:4a:72:b4:05:26:ab:57:35:fd:22:2c:4e:c3:75:1a:
d2:88:7d:01:bc:5c:8e:fa:03:2f:bb:4e:96:26:ec:c9:0e:66:
07:d9:da:12:0a:6f:c2:c8:a7:14:00:63:8a:28:e2:e3:14:59:
1a:3d:fb:63:8f:81:2f:27:88:52:af:55:81:62:7e:98:bc:83:
ef:95:39:14:a0:cf:c8:a5:61:9c:c3:27:21:7c:db:78:2c:c7:
63:13:0f:cb:37:6c:ea:7a:36:bd:b6:df:20:7c:3e:55:ca:70:
74:84:99:c6:5c:db:58:a0:d5:8a:8b:cf:01:47:ee:f0:4f:f4:
87:5d:ee:a0:59:37:9a:d9:de:b7:f6:64:67:c0:db:a3:71:9a:
74:6c:ca:73:bf:7f:76:b4:a2:a9:67:8f:7f:c2:b5:cd:8a:79:
03:ea:91:13:6e:5a:bf:17:f6:a5:ab:c1:e3:3a:e5:13:0d:ab:
a4:e6:1e:f1:95:15:12:f5:50:31:cd:1f:2e:f1:fd:8e:4b:48:
c6:60:2a:8f:bd:c9:f8:ec:6d:bf:0c:b1:f8:6b:0a:ca:31:58:
55:18:a1:99:0d:3c:97:97:4b:4c:82:ed:d9:d5:37:38:1e:c3:
7c:82:e4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:20:26 2025 by rpki-client