Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa
File: 3d97d649-dd61-39e8-94b1-2e5a345cf305.roa (raw, json)
Hash identifier: B/oVSeB+2Tw1fGtYPcKzTSQfvJSyIGhnvRX2K973wT0=
Subject key identifier: 71:B7:28:AF:F2:9C:D6:29:30:DA:DF:E2:7C:53:1D:60:24:2D:10:10
Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial: 010D0C9F43285848100A929D0CEFBC56CF76B9C0
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 11775
IP address blocks: 192.149.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:92:9d:0c:ef:bc:56:cf:76:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=d1f2d858-b9f0-4848-b915-4e70e2ae8a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:40:46:b1:0e:ba:98:f5:3d:8b:92:f7:8c:
d7:0c:ad:35:0b:8b:16:82:15:4c:f0:2e:a7:9f:f3:
98:0d:49:cd:d9:2a:7a:a1:7a:61:4d:a4:20:9f:df:
b8:84:fa:b8:2e:ea:b1:09:c3:04:4e:ef:69:3d:55:
88:fe:d7:02:a5:47:5f:24:b6:22:37:e3:27:6f:85:
6d:08:97:40:ec:59:94:1b:3c:bc:8c:66:d2:c3:7f:
19:56:7d:96:b6:50:1f:79:43:fe:80:ba:3c:22:a5:
43:c6:86:e9:08:a1:cc:dd:de:d1:ef:31:80:6d:78:
64:0e:88:0a:bd:db:57:a6:1c:80:3d:6c:ca:75:7c:
b6:63:db:5f:66:71:cb:98:d7:e4:ee:e6:29:51:7a:
db:ed:9f:0c:8c:11:bc:a2:e2:ef:21:90:68:c1:66:
9a:55:d2:8d:3e:91:b1:7f:e9:b1:83:c7:74:80:49:
66:cb:a5:25:1c:a9:e9:e9:95:2a:b2:9b:ad:73:af:
d7:9e:d1:84:1d:23:9b:dc:70:12:63:29:36:3c:7a:
ed:a3:bb:08:6a:76:c2:17:c0:7f:e3:31:9d:af:0f:
08:50:e8:f3:e9:db:c9:c6:1c:20:25:2f:e9:7d:d0:
99:ca:81:54:72:80:2c:ad:60:6d:f5:df:17:31:17:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B7:28:AF:F2:9C:D6:29:30:DA:DF:E2:7C:53:1D:60:24:2D:10:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
X509v3 Authority Key Identifier:
keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
sbgp-ipAddrBlock: critical
IPv4:
192.149.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:d5:1d:68:a8:3c:ff:3b:65:76:67:95:7a:ba:38:84:fe:00:
eb:ae:92:3a:78:24:75:8b:1b:7e:21:0b:5a:88:1b:c8:54:12:
6e:7b:4c:29:bd:ff:ec:90:f9:f7:a9:20:80:14:fa:20:c8:fa:
50:2d:11:ef:00:e4:aa:4c:a4:21:d4:b3:5e:e4:a6:66:20:44:
7f:8c:d1:5a:88:46:41:d6:7c:da:5a:ad:d7:f4:1b:49:cb:96:
d4:31:1d:4f:4f:00:8d:6c:46:79:2e:17:b2:63:4a:ad:12:d9:
da:de:c1:f0:da:d4:bb:f1:61:50:f2:11:0f:d0:f0:26:12:0f:
8c:3a:00:a5:f8:01:1d:c1:bc:75:00:40:3e:f4:f3:97:bc:f8:
f5:3d:f1:48:2d:ed:a4:23:16:cc:48:8f:25:d4:8f:51:eb:31:
17:44:4e:18:8b:ad:29:84:5c:ed:3c:f4:6d:2c:99:ad:6e:11:
09:8d:66:5d:21:47:3e:bc:bd:92:04:21:b0:d7:99:90:e5:a2:
a0:e7:7e:5d:21:8d:a9:4a:6d:de:9a:36:52:ce:55:42:56:ae:
20:32:f7:ca:fe:b7:5e:f8:76:fe:5e:7d:e7:50:d9:d6:f0:35:
21:54:6f:a3:36:63:f8:46:2e:d1:b9:dd:79:7f:09:e7:17:39:
2d:45:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:53:15 2025 by rpki-client