Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa
File: 5a8aa138-b40a-3f8d-8630-d273b7a86699.roa (raw, json)
Hash identifier: IN44RWieifQqHFXNi1W4AU3qclki6BzD2bVLIAYTNGY=
Subject key identifier: D4:E7:9B:72:9E:27:0D:48:05:84:17:2F:EA:E0:8D:A2:38:85:55:8B
Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Certificate serial: 010D0C9F432858486AC599CC4FCB4329A3AB4000
Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 19782
IP address blocks: 192.200.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:99:cc:4f:cb:43:29:a3:ab:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=dfd14d0f-f600-4855-b192-beee4288be13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:bb:3f:8c:0a:81:89:4f:51:f2:1f:26:2f:
56:74:fe:58:df:ae:4f:a5:c7:a1:4d:fd:71:2d:c8:
6b:60:82:4a:4e:46:36:ac:ca:de:f1:7b:55:3a:10:
51:15:3c:68:b0:f0:e0:06:a7:13:a9:28:ac:22:58:
57:12:13:a7:83:34:7e:cd:9f:20:cb:d1:07:02:55:
a5:42:75:60:b5:b4:fb:ab:63:09:81:13:14:f0:d9:
55:65:bc:5b:35:46:a8:75:a2:e9:54:fd:ee:f4:c1:
5b:99:2b:e2:77:87:d5:d3:b9:ea:33:94:66:76:5f:
de:f3:f6:6b:65:d8:10:48:24:81:93:ab:ae:bf:55:
13:99:28:1c:59:c6:da:a9:89:e1:a0:e0:20:32:7f:
ac:34:63:55:2d:3b:0f:08:f3:a9:cc:72:c3:c6:5c:
29:30:e8:af:33:08:2c:77:ae:cf:e4:7a:e5:32:3b:
a8:04:99:ee:fe:11:1b:c7:47:73:ca:e1:4d:a2:b3:
da:0f:a9:d6:79:7a:35:65:7d:5e:43:e5:50:2a:9a:
e6:d3:0f:6e:25:ea:fa:6f:90:a0:78:b6:cd:ba:28:
6b:3e:db:3e:92:86:d8:8b:4e:dd:e3:69:72:07:a3:
ed:0d:05:09:ec:cd:b6:2e:84:ea:8a:e1:c5:96:e8:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E7:9B:72:9E:27:0D:48:05:84:17:2F:EA:E0:8D:A2:38:85:55:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl
X509v3 Authority Key Identifier:
keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.200.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:ce:66:29:bf:ca:a1:cb:09:67:fa:30:0c:a5:b0:98:7e:a1:
42:76:ad:12:89:a3:5c:99:d7:1a:01:5d:a2:80:81:ff:ae:2a:
1b:69:d2:6c:41:51:6f:b2:5d:2a:bc:a6:f7:df:ac:22:bb:11:
e1:00:aa:89:d8:17:75:74:8e:71:18:da:66:72:f7:94:13:01:
99:a0:6c:de:db:02:aa:75:f9:de:ec:05:8e:34:7d:2e:a7:a1:
45:96:9b:b7:19:e0:8e:9d:00:df:d2:4a:36:e7:75:59:18:57:
4e:75:75:35:2c:8a:12:2d:f0:58:4d:c2:e0:dd:44:c4:48:7d:
f1:34:5e:36:36:20:b0:8d:08:d0:ce:0e:66:4a:58:bb:da:e6:
57:97:20:38:36:5e:ce:be:f4:a1:6d:9e:fb:7c:ed:00:2e:c8:
10:54:d5:f8:65:ea:64:40:a5:43:29:28:f8:9e:4b:09:a3:13:
8d:1e:36:91:c2:8c:1c:95:66:ff:4a:0d:98:0f:30:d9:88:bd:
9c:da:c0:0b:6f:07:bb:58:1d:03:9b:d9:38:fa:9a:c5:ad:8b:
be:39:6f:85:3a:1c:4a:6f:80:eb:19:46:d5:0d:78:a4:9a:aa:
45:cc:a2:68:f7:e9:6b:03:d9:80:ab:91:e9:25:42:f8:69:b4:
9b:c2:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:10 2025 by rpki-client