Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7927bc7e-536c-3911-98e6-461025c15152.roa
File: 7927bc7e-536c-3911-98e6-461025c15152.roa (raw, json)
Hash identifier: NOkdrGh/YYisd4OlxbvgDovavWIutSxLRqqohUym+ks=
Subject key identifier: F6:94:28:1F:83:00:B8:58:FE:28:C5:92:B9:A8:1C:F7:E5:D8:65:3B
Certificate issuer: /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial: 010D0C9F4328584812D53449A17C7B3406072E30
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7927bc7e-536c-3911-98e6-461025c15152.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 14499
IP address blocks: 142.192.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:34:49:a1:7c:7b:34:06:07:2e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=0c2625cf-e376-47bc-8e8a-1c7cc2a7e509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:f7:fc:32:66:19:42:23:2e:9e:fd:5b:03:
df:51:87:a8:c1:12:08:d5:f9:ac:55:95:dd:17:c6:
82:0f:df:73:53:6c:c6:ee:aa:ba:b1:95:ac:ef:75:
b1:84:ae:ac:a7:69:b6:b4:0d:f1:64:62:72:90:6c:
34:95:3b:69:a6:2e:cb:cf:ce:c1:39:fe:a1:08:71:
73:ac:a5:7b:56:0b:1c:00:48:ee:96:a0:a1:15:38:
bf:66:3a:3b:c9:20:86:69:76:a2:0f:1d:0c:d9:a2:
cc:0f:2f:b0:13:3d:db:fe:0d:f1:8c:8e:d4:d9:c8:
9a:2e:34:df:bc:64:77:7d:c6:a0:fa:04:fd:15:05:
5a:8d:94:af:69:59:ef:3a:47:8a:90:63:73:9a:02:
0b:a7:ce:26:42:6a:95:44:6d:4d:bf:e5:75:ba:ff:
1d:b2:52:35:ff:ef:43:2d:cf:bf:61:b2:65:29:ce:
86:79:69:e6:fa:db:4f:cb:fe:58:ae:cf:65:bf:15:
1a:3c:fd:af:3d:b1:a2:4d:f5:bb:0b:85:6f:df:fe:
bc:12:c4:ad:48:e5:b2:49:d4:b3:98:fc:3d:3e:a8:
4f:06:0a:82:9f:24:b5:2d:dd:0f:4f:de:e4:c6:8b:
fc:86:92:bd:da:28:11:24:c3:67:0a:ce:0d:9b:20:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:94:28:1F:83:00:B8:58:FE:28:C5:92:B9:A8:1C:F7:E5:D8:65:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7927bc7e-536c-3911-98e6-461025c15152.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
X509v3 Authority Key Identifier:
keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
sbgp-ipAddrBlock: critical
IPv4:
142.192.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:5c:ee:d3:2e:be:db:95:fa:f6:f1:e8:37:57:d8:8d:e4:f7:
14:d3:95:5b:b8:48:42:8c:77:b2:da:b8:78:36:2e:ca:c1:f5:
47:8d:80:44:2c:ad:e3:43:0c:06:59:17:41:b3:92:88:61:a1:
74:39:f9:55:7a:b8:fc:ef:dc:ad:2f:51:ee:ae:cd:0d:1a:94:
71:d9:9a:43:a6:b0:ca:4a:6f:12:a4:ec:9d:dc:25:d4:b9:57:
ca:a4:0d:65:ba:66:66:d2:42:2f:1d:7e:f0:3a:2b:8c:1c:3a:
f3:4d:b6:ce:ff:b8:29:18:c0:f5:21:4d:f0:2b:43:6c:0e:d6:
bc:63:56:92:5f:bd:13:00:51:ed:14:16:3d:5e:86:a1:bd:32:
ce:f9:b3:c8:17:ec:a6:17:65:bb:e8:93:fe:f9:e1:06:82:0e:
23:93:1d:18:da:73:08:e2:1c:12:9c:46:08:fb:37:15:21:c0:
77:e1:a4:3a:88:5a:da:b2:f6:cf:b0:8a:33:02:c9:90:e5:2d:
12:1e:8b:13:d7:4f:76:7f:d1:e1:10:d1:54:59:8d:ec:85:a3:
7f:e3:16:74:6f:e5:6a:60:ab:cc:19:f7:5d:16:ff:2d:3d:a6:
91:e9:a3:bd:ff:36:a8:93:f7:35:02:6d:18:16:c2:98:c6:50:
f5:fa:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:37:12 2025 by rpki-client