Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa
File: 233688fe-a33c-3a81-9597-da16bac00035.roa (raw, json)
Hash identifier: 3esvPTqNwrQJuza0vTxH3I973EsGQz68BV4SHRv4IQ4=
Subject key identifier: DE:D6:3F:C9:FB:81:54:23:5C:B2:F4:38:67:2B:06:AD:DF:60:E0:EB
Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a
Certificate serial: 010D0C9F43285847FFE6C9BEFF51945F80B46380
Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa
Signing time: Mon 25 Nov 2024 19:16:05 +0000
ROA not before: Mon 25 Nov 2024 19:16:05 +0000
ROA not after: Sun 23 Feb 2025 19:16:05 +0000
asID: 16509
IP address blocks: 192.41.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:e6:c9:be:ff:51:94:5f:80:b4:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a
Validity
Not Before: Nov 25 19:16:05 2024 GMT
Not After : Feb 23 19:16:05 2025 GMT
Subject: CN=eab5322f-14fe-4637-992b-27be79e4bcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:b6:e9:9b:6f:0b:ef:54:d5:a0:ff:98:1a:
00:25:31:48:15:cf:34:0d:9c:74:27:ee:9e:28:fb:
06:6b:9c:1a:16:5a:5c:b2:7c:cd:5d:f7:5d:f8:bc:
7b:e3:87:97:19:48:3f:8d:0f:6c:c8:13:2b:fa:bd:
e7:1f:1c:c0:31:43:ca:2a:18:66:3d:e3:bd:fe:a8:
3e:80:ca:69:fb:ef:30:ea:e4:65:0b:79:01:1e:5c:
a3:65:f8:42:ed:2a:47:3c:5f:00:ff:68:60:7c:a1:
6e:1a:cd:dd:cb:25:af:0d:9c:ba:93:da:13:91:bd:
6e:39:0d:30:a6:36:9c:81:ea:fc:36:42:0d:0e:73:
79:e8:bb:16:c4:de:e1:04:95:62:cc:7d:db:35:3d:
8b:79:47:45:2f:cc:36:f8:e1:00:eb:28:28:05:27:
9e:96:82:ed:a9:53:bb:ed:32:9c:93:52:c5:62:cd:
10:f5:28:50:96:cc:7a:aa:8e:81:c8:29:2a:03:72:
9e:e1:a2:45:70:65:58:08:d3:85:85:f9:19:c8:9b:
4f:63:ac:8c:01:ca:d3:bd:79:bf:82:ee:1a:43:df:
06:ef:be:e4:cd:4d:9f:6f:27:77:8f:8d:c7:de:50:
be:78:31:68:fc:c6:0b:86:7d:45:82:ad:63:f1:27:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D6:3F:C9:FB:81:54:23:5C:B2:F4:38:67:2B:06:AD:DF:60:E0:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl
X509v3 Authority Key Identifier:
keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.41.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:74:a7:f2:2b:03:a6:9f:b8:06:d1:45:a2:c8:4c:5b:f1:cd:
26:43:5e:2a:70:5d:76:8a:12:83:2a:97:55:fc:ce:23:f3:9b:
7d:bf:4a:0a:3d:94:bb:e0:87:25:f7:54:51:af:1f:74:a6:57:
f3:dc:75:09:86:91:46:33:3b:fa:9f:f4:f0:34:00:67:4b:df:
f4:45:6a:1a:fa:3a:e0:db:40:78:9b:9d:b3:77:8b:b5:1e:ce:
4f:d9:f7:7b:5f:1b:6d:03:43:29:bd:f8:76:a4:16:af:70:03:
42:95:ea:38:03:5d:0b:e9:f0:d8:2f:58:87:0c:66:f8:09:be:
fe:4a:b2:1b:c7:39:32:a1:d3:9b:d4:7a:b3:7d:f1:4b:bd:29:
55:06:65:f5:9d:ad:1a:3b:1b:e6:98:c7:75:3c:e6:92:99:52:
56:f3:3a:95:a9:19:eb:b8:a8:36:a3:05:f9:a6:ce:23:6d:76:
fe:c5:74:4d:84:d3:33:36:f8:4b:bd:a2:f1:0d:a3:7c:7b:83:
09:4a:91:3f:4e:14:46:54:0a:8a:99:e5:7c:9f:13:d3:66:8d:
86:a0:5b:33:29:c8:26:31:b7:65:fe:21:1b:17:52:f7:80:c4:
d8:71:5d:e1:96:86:b3:0f:88:10:66:ed:8e:3b:a6:22:ab:60:
ba:a1:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:51 2025 by rpki-client