Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
File: bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa (raw, json)
Hash identifier: H7WCk2KR1DgverSBBhTSIAVjTEA8dQZjS4yyvBS+RGc=
Subject key identifier: 41:0E:2A:AD:41:BA:F8:CB:2D:71:D9:F6:23:3E:C9:C8:62:A9:61:27
Certificate issuer: /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial: 010D0C9F4328584832F03222C7B6C07EC0D38990
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 11978
IP address blocks: 192.5.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:32:22:c7:b6:c0:7e:c0:d3:89:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=df6821a6-7b82-4ca7-85e0-71062d90a44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cd:95:67:20:46:be:60:62:8d:17:a1:08:7a:
80:52:9b:f0:6d:31:6e:ad:be:60:d1:85:3c:ab:d6:
f9:bb:23:1d:d9:2d:e0:6b:c8:94:5e:a1:1d:31:c3:
53:35:46:e4:01:42:61:09:3e:bf:8d:74:65:f8:67:
3c:c0:19:ab:1d:d0:de:b8:59:71:93:45:44:5d:75:
c5:e8:35:68:1b:08:6f:15:5a:93:69:8b:34:bb:1e:
13:fc:a7:d8:19:ef:b3:41:d3:85:8c:d2:bc:8d:e6:
17:98:65:c1:f0:84:27:6d:cd:16:b7:4f:6f:fb:fa:
6a:5d:41:4c:ff:23:dc:bf:24:a6:3f:9c:c0:50:40:
f7:d8:5a:0e:00:5e:16:f3:44:8d:7e:10:20:68:63:
12:7a:53:83:a3:b7:80:48:ab:53:37:1c:8c:6f:28:
7b:ac:28:de:0a:36:7f:ec:ff:a7:ba:8a:22:aa:45:
0b:d5:59:60:ba:c9:3e:10:0b:56:98:6d:03:f3:5d:
87:99:0c:9c:6e:02:e1:70:34:46:d0:7a:2d:54:01:
3c:3c:a8:85:97:fe:a4:b9:32:3c:e3:68:8e:bc:86:
3d:e5:d8:bb:c2:0b:2f:96:ed:64:46:c8:2a:dd:2d:
a9:60:3b:58:54:98:3e:9b:69:ff:15:88:73:af:51:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:2A:AD:41:BA:F8:CB:2D:71:D9:F6:23:3E:C9:C8:62:A9:61:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
X509v3 Authority Key Identifier:
keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:32:73:6e:92:56:1e:f0:9d:06:1f:70:66:53:79:81:87:a2:
5a:c7:ed:93:61:12:38:61:14:85:69:1c:ec:d2:40:45:0c:d3:
f8:42:66:60:3c:53:2f:32:1c:74:05:e7:19:82:98:90:30:16:
65:da:16:8b:19:cb:4d:67:ba:e5:7f:33:69:1c:ad:ee:01:bb:
93:98:c4:06:a5:e9:cf:d2:8e:c0:65:6f:27:cb:ec:3b:b7:c0:
07:2c:74:66:78:9a:cd:40:ce:fa:12:e5:24:e6:ac:af:c4:8d:
2e:aa:19:a0:d3:bc:00:44:cf:15:65:0d:39:3e:a7:ae:6f:0b:
40:40:d1:25:f7:24:a3:d4:a3:c4:17:24:c0:25:45:42:b2:a4:
30:79:ad:de:12:89:4e:66:ba:d4:38:3c:c0:16:cf:14:9d:a5:
a1:4a:29:75:40:55:24:26:9f:f6:0b:90:bf:fa:19:1b:14:5a:
b1:2a:85:10:72:9f:47:66:1c:dc:98:f0:f1:c1:46:16:c6:44:
0c:a7:75:bd:b5:ad:b2:13:17:3c:80:d4:6c:03:7f:4c:7f:42:
c3:61:aa:e4:7e:38:1f:6b:c1:71:6b:10:19:6b:0a:ac:3e:62:
b9:1b:04:d7:bf:14:88:29:09:14:65:00:7f:bd:31:f0:5c:df:
20:0d:21:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:48 2025 by rpki-client