Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa
File: f84f7d22-eb77-3b0c-9804-527be438dbd6.roa (raw, json)
Hash identifier: T/lalvSDJSA0GdOJ0zcgl1DRSrAq3SpMWozw8qKgDbU=
Subject key identifier: 93:00:A7:45:66:90:E6:55:C8:4B:A4:BE:7B:CD:73:C7:73:25:C6:12
Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
Certificate serial: 010D0C9F432858484D7595C0E0AE40A08BC5DD20
Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 32746
IP address blocks: 192.122.149.0/24 maxlen: 24
209.209.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:95:c0:e0:ae:40:a0:8b:c5:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=1f4e5ee6-36f0-4234-8905-6d9be3ea965f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:8e:ea:68:a0:32:97:10:31:11:b5:62:25:
82:7b:b2:17:5d:11:e2:45:e3:b0:d9:d8:34:42:94:
33:17:64:62:df:2d:b1:96:ff:bb:71:94:92:16:e9:
99:59:73:43:5c:1e:ea:67:f6:d0:3b:59:f1:b2:6b:
21:de:be:98:e1:01:fb:8c:d3:31:65:76:13:3a:ce:
a0:10:e2:e0:8e:5e:95:38:c8:72:c0:85:e5:78:1b:
46:3d:59:32:0d:93:18:c9:e9:ad:24:66:44:15:24:
90:eb:61:97:9e:7d:2a:b9:48:eb:72:d2:fb:21:d3:
fd:4c:ea:d7:23:8f:df:7c:a4:c9:ae:fb:f2:d8:db:
5f:bc:f5:ca:c6:68:84:89:d1:4a:37:18:5f:f0:7c:
8f:a0:24:53:32:fd:6c:d2:c1:fc:92:79:10:40:b7:
af:ba:7d:1b:5a:e3:41:57:b3:61:b1:11:df:08:3a:
9b:c6:12:03:2a:5a:2b:ce:43:6c:12:40:d6:dc:03:
50:06:a1:44:4b:b1:61:59:1a:5f:fc:0d:17:33:62:
6d:f1:a2:a3:9d:01:64:c8:a1:ea:aa:1e:56:cb:0d:
a8:6a:ee:0e:31:3b:30:df:a0:f0:a8:56:00:23:c7:
8a:32:a6:0e:7f:cc:04:19:1e:eb:9f:15:1b:c6:f1:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:00:A7:45:66:90:E6:55:C8:4B:A4:BE:7B:CD:73:C7:73:25:C6:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl
X509v3 Authority Key Identifier:
keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
sbgp-ipAddrBlock: critical
IPv4:
192.122.149.0/24
209.209.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:fc:ce:76:57:b5:bb:d0:d2:2a:bb:97:5b:f5:33:d6:51:ce:
80:03:e6:a1:49:82:37:00:74:6f:25:23:cb:2e:73:f5:8c:af:
23:3d:f2:7b:b7:a0:b6:3a:aa:3b:c5:47:1d:67:24:e5:a7:b5:
57:cd:0c:fa:a9:c7:85:5f:b4:a1:4a:b0:c1:91:42:80:51:80:
cd:64:cb:f0:e4:6d:37:73:08:f9:42:fa:92:87:3e:80:d0:2b:
33:0b:d7:d5:da:d4:9c:62:32:d9:e9:1f:e3:96:ed:97:6d:77:
53:67:5d:94:89:13:be:f5:e4:86:72:90:6e:a5:3b:ae:71:1c:
53:73:03:eb:c7:96:a8:f9:6b:80:09:45:bb:ed:24:8a:a5:ef:
76:66:ad:51:47:3b:c2:fb:e7:da:d1:3f:0a:93:f1:23:71:dd:
a9:1a:e6:45:20:0c:85:67:7d:2b:be:85:14:08:b2:02:fd:bf:
d7:fc:20:8e:9e:63:13:18:0c:b7:42:1f:5e:81:ea:cc:31:a9:
32:cf:f1:df:c8:7c:09:fc:7d:fb:f2:35:b0:51:4f:38:f6:dc:
09:a8:20:c1:a1:8c:57:fe:ac:a8:1e:ae:6c:e9:1d:5a:47:d7:
9c:2b:c7:51:18:d0:5c:88:ce:b4:07:30:ce:b3:e2:46:58:a0:
05:2e:93:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:21 2025 by rpki-client