Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa
File: 039a554e-43ba-37e6-98d1-af4a718c60b8.roa (raw, json)
Hash identifier: +U6tBbtdlyTt5tZee/KM2DRovaBSL9I763nB6XHySNk=
Subject key identifier: 1C:AD:C9:49:2F:B2:63:CA:5A:FE:8B:50:81:28:05:98:9F:1F:69:12
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F4328584834558235686347358F8F2C80
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 22925
IP address blocks: 192.95.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:82:35:68:63:47:35:8f:8f:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=7aeaf8b1-9e53-4d60-985c-6d8c9e1aaea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:df:95:01:fd:cb:d2:7b:db:62:e5:7d:e1:
21:a7:e9:ff:97:53:5d:9d:e5:17:79:09:58:33:58:
31:3e:13:66:62:95:49:47:62:1b:ae:42:ad:43:13:
c2:c6:3f:49:95:61:26:22:77:ee:e4:d8:ef:f7:69:
5e:64:5d:d0:e0:f9:99:fe:d0:69:6f:03:59:41:63:
52:d7:a0:65:59:7b:35:ff:d3:78:78:20:1f:4b:f2:
cd:8d:03:a1:c9:22:ca:8e:d7:91:c4:57:dd:f3:d2:
6a:d3:40:35:aa:04:66:be:9e:13:e5:b6:5d:ec:e2:
2c:fb:35:c3:57:d7:d9:1d:a9:ad:0c:25:c4:f0:f4:
38:08:05:e8:03:8b:0b:24:c1:ef:c7:cf:18:ef:4b:
6b:64:1d:ae:43:d0:cc:ed:5b:21:16:86:31:f7:ac:
d3:bd:92:30:30:be:25:a0:d8:90:3f:29:7e:0a:e4:
2d:40:a4:27:04:d6:87:e1:37:37:63:00:96:03:42:
fe:ca:de:5b:9a:af:96:bb:00:05:ca:13:91:db:3a:
5b:43:81:06:cd:88:da:dd:21:75:b4:2f:21:11:1e:
9e:e3:a5:5c:61:af:fa:90:7f:08:eb:31:e4:09:2e:
62:61:0d:eb:bf:32:b1:69:c3:16:f9:80:1d:ae:a9:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AD:C9:49:2F:B2:63:CA:5A:FE:8B:50:81:28:05:98:9F:1F:69:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.95.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:03:ba:0e:f4:b6:cc:e3:4a:86:ea:2d:bc:1e:80:1d:96:24:
ee:47:c0:47:b4:56:f3:fc:2e:eb:63:f0:f8:68:f8:ae:17:c1:
b0:5e:82:73:70:30:da:4c:fc:58:b8:02:f7:4f:19:42:90:41:
f3:19:7a:97:3b:d4:e4:f4:e5:bc:35:39:5a:11:23:cf:55:48:
dd:9a:c7:16:78:04:ac:8f:04:63:a3:8c:c1:56:4c:84:11:e0:
8f:76:f1:c8:4d:63:85:f0:ec:97:94:1f:62:f5:e1:a3:dd:75:
a8:09:8d:4d:1a:8e:d1:44:c8:c3:7c:0f:1f:1b:4a:e2:43:1a:
e4:48:29:f7:ea:8f:1e:b9:fe:5b:27:ac:ea:c5:7b:18:36:1f:
9d:48:2c:1b:5a:ba:99:e7:f5:6e:a6:1f:cd:dd:4a:a2:e9:2b:
55:32:cc:e6:9d:b1:63:49:01:e2:8b:13:00:22:f0:d8:fa:d1:
21:9c:46:d5:cc:da:11:7f:15:23:d3:da:de:c0:24:94:6b:d6:
5d:04:e7:9d:d6:9b:fa:3e:9d:93:b8:91:d6:d5:7a:b5:36:62:
e7:56:b3:9a:59:df:e0:74:02:93:e4:0f:29:e7:8d:4f:f3:b4:
aa:b4:04:7d:6f:95:98:cf:72:08:56:44:64:07:26:30:8c:d7:
65:d6:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:20:48 2025 by rpki-client