Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa
File: f829599e-00f8-3c5a-95c8-1624e200ebd0.roa (raw, json)
Hash identifier: 1gVtwa70+e946NJ3yg5BL6qsnWINBtat2htJasmll9o=
Subject key identifier: BA:79:46:0F:60:65:F5:9A:15:A4:38:9A:00:BE:8E:15:F5:51:41:43
Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c
Certificate serial: 010D0C9F43285848451585EA60FACA53A3DA0F80
Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 194
IP address blocks: 128.117.0.0/16 maxlen: 16
192.43.244.0/24 maxlen: 24
192.52.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:85:ea:60:fa:ca:53:a3:da:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=052fe2f2-aeb0-4c09-9e5b-28bcf3b3abe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:cb:e0:c6:91:64:79:ad:4b:f1:9f:f8:f0:
80:f9:67:00:21:71:1f:54:ee:48:62:0c:26:33:c3:
27:45:f5:9f:af:ba:3a:81:ba:b3:2f:e4:cb:47:f5:
91:09:ef:03:cc:29:2a:55:45:95:72:dd:76:4c:08:
f8:a7:fa:c3:37:1f:f1:46:e4:73:a9:13:c4:b4:7f:
74:e2:34:23:81:a5:f8:33:23:53:49:59:18:6a:21:
c3:69:f8:34:63:e6:05:86:69:2a:63:f9:a7:2f:79:
53:54:3d:20:99:79:4a:c7:23:43:97:46:f0:60:b9:
b1:17:3d:48:16:5d:c3:17:8e:00:e5:e1:a7:f0:4b:
f9:ea:3c:25:88:b7:c4:64:e2:da:36:7a:c6:4f:e2:
54:03:94:bd:f9:6a:b4:62:14:8d:fd:df:6f:25:7d:
b9:1e:e7:27:b9:c4:1a:70:4d:12:c9:d3:11:8e:de:
59:c0:01:fa:75:39:7f:71:f6:eb:51:58:fb:21:d9:
81:a1:5d:37:2d:31:75:f0:be:d7:e0:0f:61:1e:3b:
82:4f:e8:c2:a6:12:eb:9c:b0:69:c9:58:f5:9c:99:
0a:de:db:57:10:9d:cc:7e:6d:3e:07:74:2f:29:9b:
64:7e:cc:0a:8f:8c:2b:a4:2d:0b:84:c3:89:d8:28:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:79:46:0F:60:65:F5:9A:15:A4:38:9A:00:BE:8E:15:F5:51:41:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl
X509v3 Authority Key Identifier:
keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.117.0.0/16
192.43.244.0/24
192.52.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f2:6c:4d:bd:d3:bb:3a:72:b8:9e:9b:ca:d7:31:37:89:13:
7b:34:d3:98:03:26:b4:4c:3c:40:c5:5f:cf:eb:74:7c:34:f7:
8b:28:18:04:6b:af:03:65:bd:f9:62:a1:63:3c:9c:bf:a6:df:
76:29:75:0c:49:24:a9:fc:cf:2a:8f:f9:c2:29:8e:46:31:bf:
3e:9b:59:1a:0e:f3:ab:c7:ae:35:eb:5a:62:c6:77:65:9e:56:
43:a2:bc:79:42:83:eb:2d:2c:5a:35:da:5b:e5:3d:a3:68:bf:
74:e4:b1:2e:34:35:02:7f:fb:d8:0d:5b:d4:7d:ff:8b:47:0c:
3f:47:f1:d1:88:e8:4e:ad:b2:99:21:58:d4:b7:19:26:6e:1a:
fd:e6:78:2b:46:38:c8:b9:70:19:37:98:a2:aa:15:88:bd:74:
8d:cd:86:f0:15:45:60:0d:80:59:09:83:fb:44:96:16:32:9f:
05:b5:47:7a:25:2c:cd:0b:d6:f7:56:76:a3:3d:95:58:1d:d8:
64:ff:85:ab:29:a2:21:cc:92:05:bf:d5:80:f7:80:c0:d2:b2:
bf:88:5a:21:9b:4f:e4:2b:0f:d0:f9:88:4b:f8:93:61:cc:69:
7d:82:f6:fc:66:d0:ae:83:88:84:79:fc:86:5f:79:b2:23:6a:
2a:00:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:15 2025 by rpki-client