Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa
File: 509e4ddf-df6f-34cc-83d4-959041c0d418.roa (raw, json)
Hash identifier: JCoQslLAzB//GdfHWQZ1cZ4NGvurDom3KQVMOGrdtL8=
Subject key identifier: E6:2F:2F:84:CA:AE:A3:42:E6:30:62:3A:2C:92:2B:95:83:AA:4D:95
Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Certificate serial: 010D0C9F432858486AC599BAF4F9B1EEE3696B80
Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 16575
IP address blocks: 192.200.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:99:ba:f4:f9:b1:ee:e3:69:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=96eef49c-28d0-4e2a-a4e2-3880faa5a79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:e9:ff:c0:d8:c2:a7:42:87:2e:ee:c8:01:
93:ee:87:14:69:63:e2:48:64:37:1a:a8:7a:08:1e:
a3:2e:8f:93:35:06:8d:f6:e3:4a:22:ed:fb:94:f9:
b2:5b:5c:bd:84:00:82:d5:bf:5d:16:44:d1:ac:ff:
bf:41:e3:b5:1e:90:36:5f:2f:b3:90:67:34:e0:b8:
68:2c:d9:9e:e0:dd:c1:07:05:e7:0a:53:2a:1e:15:
2e:fc:ae:98:43:8f:60:9d:fb:af:f4:68:88:9e:c1:
44:bd:c8:53:e3:02:c7:0d:f5:e1:f2:69:49:5a:fc:
12:b3:d5:db:4b:8d:76:94:33:ba:22:41:bb:65:83:
22:c2:c0:19:7b:d4:25:86:e2:54:3b:3f:0a:b7:2d:
2d:2c:09:79:79:31:da:ec:92:28:29:40:de:c6:bf:
02:32:72:da:b9:81:2f:7e:87:66:a8:7a:71:bf:8c:
9a:be:61:6a:6e:15:98:8f:24:63:c2:c7:ea:fb:f1:
fb:d5:78:44:2d:22:03:98:83:f6:ee:ca:c1:bf:ed:
ba:8a:dc:31:48:88:1f:c0:77:c1:66:f2:57:66:95:
3b:f6:8f:93:ce:e5:ac:9e:54:c1:c7:29:2b:c1:c0:
fe:f0:64:6f:34:92:7d:6f:18:19:28:97:15:e8:88:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2F:2F:84:CA:AE:A3:42:E6:30:62:3A:2C:92:2B:95:83:AA:4D:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl
X509v3 Authority Key Identifier:
keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.200.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:99:11:7f:38:b4:f2:08:8e:bf:07:87:8a:3e:1c:e0:16:1f:
1e:28:55:f3:fa:78:f2:55:59:e0:69:fd:c5:42:92:3c:28:06:
9b:78:8b:50:ba:29:c2:ad:33:c9:d2:b0:18:69:76:d5:24:4f:
4d:76:63:ab:55:1f:e6:3f:75:f5:e7:6c:6b:8f:b4:a5:ce:7f:
3c:9c:0d:dc:cd:24:ef:fe:5c:9a:41:86:39:69:b4:2a:e4:c2:
7e:31:77:6c:f4:85:19:8a:d6:86:04:e5:00:18:e6:7a:a5:89:
9b:2e:67:5b:3e:f9:b0:af:f9:87:c5:79:99:7c:80:01:4e:89:
da:77:ac:e1:5f:41:fd:a3:2f:f9:10:f3:06:e5:5e:30:d8:ed:
60:a1:ce:7a:01:79:07:e5:9a:a3:38:fd:04:58:47:16:54:5b:
19:01:66:30:ab:4f:1a:6f:47:f7:9f:90:1f:8c:20:41:0a:79:
0e:b2:e8:93:c0:bd:65:90:48:55:1d:06:c0:e9:e4:05:d3:4e:
24:30:0b:62:11:d8:2a:5f:84:98:36:7d:06:89:15:f6:ea:b5:
67:82:b9:fb:54:db:c3:0b:b4:32:15:10:e4:5b:ea:56:08:bb:
b5:93:02:4e:cf:56:9d:a4:37:55:1b:54:93:07:30:cc:20:6b:
90:db:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:50 2025 by rpki-client