Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/c329fa75-d1f2-39cd-b2e0-c7dd6fb77b9e.roa
File: c329fa75-d1f2-39cd-b2e0-c7dd6fb77b9e.roa (raw, json)
Hash identifier: a3IcnaqodCyg1KPdxUxR5N6iPzTjnodnQ+FsfDIWTYk=
Subject key identifier: 32:10:36:F4:EF:CC:C8:6F:A9:0F:E9:7E:C8:3F:15:02:38:7F:CF:4D
Certificate issuer: /CN=9df74e6e-da16-4cba-a854-ee087e767113
Certificate serial: 010D0C9F432858487755DFC6C612BC896E1D0C80
Authority key identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/c329fa75-d1f2-39cd-b2e0-c7dd6fb77b9e.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 15318
IP address blocks: 192.197.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:df:c6:c6:12:bc:89:6e:1d:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df74e6e-da16-4cba-a854-ee087e767113
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=927d0e72-3cfc-4667-af63-c828b3d39c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:df:24:9a:7f:88:43:ba:16:98:72:b5:14:
02:34:95:dc:ee:de:d2:9b:b5:59:da:dd:8a:3d:43:
a8:d0:07:42:48:15:e7:c0:36:3a:9a:42:76:6e:5f:
cc:bd:5e:2b:51:4b:e6:83:09:77:02:45:f4:1b:4c:
18:9c:69:35:42:5e:d9:aa:b8:52:a0:93:88:eb:3f:
6b:45:05:43:1a:c0:1d:d4:9a:8b:c2:a9:6e:79:eb:
25:c9:96:bc:5f:1f:9d:85:9b:ca:d2:d9:32:8a:d8:
52:9d:09:56:a3:28:0d:ef:9f:7d:99:f4:4a:c4:31:
93:1a:ca:9d:5a:21:38:cc:82:39:cf:9e:7e:ec:eb:
34:b0:35:9f:dd:12:11:13:27:2f:b4:21:43:c2:7d:
9d:62:db:33:ab:df:f5:65:3d:1c:29:fa:0b:ec:3c:
e0:2c:de:98:9d:ed:42:98:a0:28:28:7a:1e:1c:de:
c7:53:b1:7b:81:c5:2a:67:db:46:dc:fb:a3:46:bc:
54:98:6a:1e:21:73:1a:ef:ce:2d:bd:5a:1f:52:3e:
bc:19:26:63:34:dd:e5:47:6e:66:67:14:88:79:de:
57:6a:38:fb:3e:1f:7f:8d:bc:77:7d:f0:10:35:9e:
d8:77:19:a0:d6:72:90:f2:ed:3d:19:51:f2:95:fd:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:36:F4:EF:CC:C8:6F:A9:0F:E9:7E:C8:3F:15:02:38:7F:CF:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/c329fa75-d1f2-39cd-b2e0-c7dd6fb77b9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl
X509v3 Authority Key Identifier:
keyid:12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:2b:f9:96:40:d1:3b:38:db:a9:11:bf:b5:f7:dd:eb:32:e1:
a3:cd:b3:b1:ac:8c:28:cc:75:b1:17:a6:45:0a:35:30:7e:e1:
2e:c4:20:88:ac:a3:54:ab:52:70:74:5d:59:98:0b:43:fe:6b:
88:80:71:a5:d1:db:f1:f2:eb:1b:3a:9d:d4:32:79:8b:26:7b:
d7:25:b5:95:ca:be:55:84:0e:11:04:03:f7:e1:70:cc:08:9d:
18:5a:ab:80:21:aa:1f:3e:d0:27:db:dd:c4:5d:7e:cd:b4:2f:
88:54:38:c9:61:11:64:02:89:7b:59:20:c9:3e:c8:a1:07:04:
4e:ca:a1:ec:eb:da:1c:a2:05:f3:c5:1f:e6:7a:c8:f0:eb:ec:
f5:19:6a:49:65:15:43:52:0b:1e:96:b0:88:7b:c1:d6:32:0b:
58:d0:4b:2d:68:04:c7:81:3e:8b:27:06:39:6e:1b:b2:e8:5b:
ec:b9:64:f6:bf:9e:3e:9d:e2:a0:94:cb:e3:0b:e3:f1:be:62:
b0:9c:45:88:a7:fc:15:44:00:93:ce:bd:ca:2e:07:cc:ba:a5:
5d:08:e0:44:12:ac:48:8b:66:d1:a6:ca:60:07:d8:d6:06:d2:
01:bd:74:2a:e4:f8:01:3c:3f:bb:7b:d1:48:73:13:48:f6:6b:
30:78:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:58:08 2025 by rpki-client