Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa
File: 3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json)
Hash identifier: czUKr2+1VPo+Wo0hriO598ziSV4nTPrLzrw8Xw87NyE=
Subject key identifier: 95:E4:2C:43:75:06:1F:63:5B:00:86:25:1A:8F:A3:5E:11:34:9C:7F
Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
Certificate serial: 010D0C9F432858484D7595B2455585A55E6DDE00
Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 53281
IP address blocks: 192.122.149.0/24 maxlen: 24
209.209.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:95:b2:45:55:85:a5:5e:6d:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=fb2543a1-e240-4e7e-b417-ed7081a87a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:07:20:5c:a6:a9:02:98:ee:5b:d1:ab:0c:
38:cc:5f:79:53:fe:93:56:01:77:a4:7a:22:41:bd:
63:33:9c:2f:ee:16:e6:46:56:f5:8e:5a:00:22:e3:
28:05:24:dc:f4:61:af:ec:18:02:67:56:69:d1:00:
95:e5:ae:46:57:b1:83:d0:1e:97:c4:b6:83:1a:20:
18:90:c0:3d:c2:3d:67:5e:f6:99:4f:f0:47:95:4e:
91:96:25:4b:84:8a:93:a2:46:bf:bf:6b:8f:10:ea:
b6:5e:34:17:0e:9e:24:1f:b0:c7:fc:68:7a:7e:21:
e2:39:75:ac:2b:47:1a:3f:45:d5:9e:c2:52:9a:f1:
52:b3:69:b9:9f:79:7d:cb:93:9c:f1:6c:90:b0:fd:
71:b3:66:c7:73:00:a3:62:d4:4a:75:3e:4e:8a:9e:
d6:ce:14:33:c4:42:9b:fc:29:c3:f9:6b:88:0b:76:
d9:0d:d7:a9:63:69:25:35:e8:3f:aa:d1:22:5d:6b:
a5:e1:47:eb:51:f9:6b:81:63:cd:0e:b2:14:b0:b8:
90:8b:52:99:9d:14:6c:9a:24:aa:87:c7:52:29:bb:
b8:fc:b9:89:bd:a0:f2:d9:cc:8a:c0:1b:55:da:ae:
93:8b:dd:5b:c1:f9:55:dc:1a:18:87:65:90:2d:89:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E4:2C:43:75:06:1F:63:5B:00:86:25:1A:8F:A3:5E:11:34:9C:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl
X509v3 Authority Key Identifier:
keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
sbgp-ipAddrBlock: critical
IPv4:
192.122.149.0/24
209.209.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:15:fc:db:a9:20:62:36:83:c6:fe:18:21:94:fc:5b:e9:c6:
65:32:c1:84:0b:a9:b3:4b:01:78:3e:78:a2:b1:c0:89:9f:41:
58:c4:0f:91:95:7c:41:de:c5:c3:3e:7e:25:69:3a:0c:22:9d:
ea:37:3b:63:69:ce:f3:4e:49:33:f5:30:a0:0e:ef:89:85:7a:
df:df:22:a0:42:21:81:15:f0:bf:ce:a5:1c:bc:0d:ea:60:50:
c4:5e:0f:d9:00:99:9e:a1:22:5a:1d:bd:c6:78:22:b1:c2:47:
84:5c:da:77:73:d6:2b:ea:b1:95:7a:f0:cf:1c:ef:44:04:27:
c4:61:30:45:31:9f:be:72:08:68:a8:23:a6:19:6d:96:e9:81:
9d:5e:5a:d0:9e:09:72:71:06:7a:e8:be:b3:c2:d4:1b:c4:57:
16:98:34:fa:7a:67:4a:ad:9d:c9:9b:95:7d:7a:ea:b9:ff:80:
5e:ad:5c:d0:4e:d5:35:bd:d4:95:b9:48:7e:15:33:d7:ff:db:
b4:c9:3b:7a:62:3e:f5:ef:28:71:de:5c:b1:b9:d6:ba:04:1e:
ae:d0:bb:07:8b:a9:2e:b2:13:fc:ed:c7:ca:dd:df:4e:a8:9f:
81:70:a2:09:cd:b3:8f:47:80:32:6a:44:ef:ac:cb:5d:39:6b:
93:a7:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:20 2025 by rpki-client