Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
File: fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa (raw, json)
Hash identifier: vKAMle/fHey/HeDQE26UFCThV3sFW8wlMlo0/U+h3g0=
Subject key identifier: 0E:76:94:EB:E3:B3:39:B7:56:30:0E:D3:8C:C5:0C:AD:E4:87:FB:54
Certificate issuer: /CN=800a3455-ccc0-4a37-976d-54fe22d7fb52
Certificate serial: 010D0C9F4328584812D52263CDDC4B66A570A140
Authority key identifier: 02:B5:A0:07:CB:1D:46:8B:9C:A1:4F:82:F8:F7:66:8F:5D:33:4A:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 33137
IP address blocks: 192.189.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:22:63:cd:dc:4b:66:a5:70:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800a3455-ccc0-4a37-976d-54fe22d7fb52
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=d6e7506c-419f-45c9-ba49-42cfc7db94f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:c2:d8:7c:e3:36:a6:fe:3d:16:42:db:4b:
7b:14:dc:63:a6:ac:0b:24:76:fc:f2:27:74:ff:27:
88:a1:d4:25:ed:11:93:10:a6:76:0a:ba:a3:05:03:
8b:4a:e9:e9:e4:df:42:2c:31:1d:23:f5:4b:92:23:
ef:81:42:cf:f7:85:93:cd:1d:44:8e:0f:5f:c3:74:
d9:1f:4a:46:d5:05:f0:d5:86:cc:5e:07:5b:fd:14:
66:d6:da:e6:f3:08:4f:9a:66:eb:b2:2e:45:d6:8f:
6c:29:8e:02:bd:18:f9:f5:41:65:e3:c1:06:fc:33:
91:24:7d:9d:04:27:8a:f0:ba:33:6c:1a:7b:c1:59:
a0:7b:5b:9b:ad:71:47:6f:95:6d:48:ad:e0:de:a6:
b9:57:fe:95:57:e8:e7:00:7b:17:13:59:2a:67:17:
cf:23:ff:75:64:f0:97:c7:d0:0e:1a:f1:b4:c3:da:
b7:7d:65:28:44:4a:3b:08:7f:a7:2e:b4:02:48:4f:
d5:3f:18:64:18:3d:3a:50:e6:ce:80:73:c1:3e:74:
6f:31:c4:15:a9:64:8b:ed:99:45:77:60:8e:44:de:
85:81:3a:0a:a9:4f:1d:cb:a6:4f:76:77:41:35:9c:
8a:2f:06:80:ba:bb:07:d0:54:15:a0:00:78:b2:2c:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:76:94:EB:E3:B3:39:B7:56:30:0E:D3:8C:C5:0C:AD:E4:87:FB:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/800a3455-ccc0-4a37-976d-54fe22d7fb52.crl
X509v3 Authority Key Identifier:
keyid:02:B5:A0:07:CB:1D:46:8B:9C:A1:4F:82:F8:F7:66:8F:5D:33:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:c2:dc:90:9d:0a:2c:af:e6:03:a5:dc:fa:c9:bb:ad:e9:f1:
32:be:0e:df:13:d5:40:3a:ce:a3:3c:81:d7:41:ec:bc:85:61:
cc:7c:88:12:29:bf:4f:ad:32:7d:2e:67:ec:0e:47:88:9f:b8:
16:63:15:2d:74:e5:eb:15:6c:d0:6c:06:91:99:5b:14:e6:db:
03:0d:2a:6d:a5:5e:d1:be:41:ce:22:e5:0d:09:79:e1:19:09:
d3:10:cd:2c:c6:f7:36:2a:08:1b:6f:29:d4:89:1b:82:00:cc:
48:ff:c0:0a:67:e4:f5:bd:f3:a5:b2:76:ea:40:1d:87:2e:c9:
1b:c6:92:ac:9b:80:d9:24:e4:2e:ab:db:aa:68:f3:5e:e9:30:
98:81:e4:47:71:a6:cb:1d:06:5a:d0:54:8c:9b:f8:e9:59:1f:
65:72:3a:54:69:e9:15:74:6b:77:12:a6:8f:a4:a8:d4:6e:25:
ec:6d:11:7e:5e:49:58:b8:e3:f5:9c:e7:c7:6c:16:ca:a5:8a:
5a:eb:65:e6:d1:df:6a:58:fa:6f:95:b4:68:cf:4b:73:da:aa:
15:e6:e0:09:2e:eb:37:ac:09:72:ae:0b:ba:cd:0b:bc:ba:73:
63:43:d2:cb:2e:ee:81:05:ba:52:bc:f4:bb:d2:bc:00:d1:c1:
49:a4:4a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:37 2025 by rpki-client