Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa
File: 9ce597f6-b093-3c3d-b115-eebeaf02c756.roa (raw, json)
Hash identifier: 3/SSIzEV+W2cBJM5hlrvJqk7551o4GPmgEKMOGLtwE8=
Subject key identifier: 85:91:6A:3D:B5:8C:44:DF:21:0F:F0:3D:B6:66:AD:D9:14:ED:6E:1C
Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Certificate serial: 010D0C9F432858485CD027CF316C227CC7C86A80
Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 59
IP address blocks: 192.12.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:27:cf:31:6c:22:7c:c7:c8:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=017316bd-f230-46f4-a533-a428f8889258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:b5:b0:96:f9:a7:74:ca:21:d0:cf:0d:cb:
14:3c:8c:67:87:b2:4f:cc:55:a1:7c:13:9d:fb:a2:
dc:c0:57:a6:5e:f9:3f:bf:70:cf:91:2f:3a:16:17:
d0:23:14:d4:09:0d:1a:ae:09:aa:22:e0:ce:50:2a:
90:21:21:6b:89:06:76:b9:19:c7:d2:b6:e9:95:35:
f8:ec:c3:37:29:c9:f9:69:fa:3c:ed:c0:7c:a4:28:
dd:12:fc:7a:3b:1d:4f:8a:b4:2d:ae:30:17:ef:a3:
28:f4:10:f3:8e:b3:60:d2:66:da:de:42:42:c3:fb:
d3:5f:c6:d2:64:45:2e:39:56:62:9f:4e:1b:9e:52:
8f:5c:ab:96:d3:76:fb:bc:87:68:fb:5e:fa:f5:fe:
8f:ef:a6:1e:56:15:09:1a:f1:89:6c:6b:ae:a3:8d:
05:4c:87:53:50:90:8f:97:6e:6f:60:7e:6d:05:b8:
6f:b7:5b:ef:a1:61:d7:bd:2d:3f:41:44:68:8d:c2:
68:6f:1a:84:22:eb:b6:b0:af:18:dc:b2:f3:b4:48:
93:5b:c2:e1:bd:24:b4:ef:46:b6:b6:df:a5:09:5d:
af:57:2b:c0:82:3a:de:ad:6a:a1:21:f5:74:c2:00:
c9:f4:18:06:48:3c:15:62:5f:a9:ee:0a:29:f2:fd:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:6A:3D:B5:8C:44:DF:21:0F:F0:3D:B6:66:AD:D9:14:ED:6E:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl
X509v3 Authority Key Identifier:
keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:d3:18:02:55:9e:93:4e:70:b9:34:08:02:76:6b:c7:04:88:
0b:2c:ce:b0:5a:e9:1d:f2:6e:4e:65:f1:9b:a1:c3:ce:5f:65:
0e:e9:57:10:54:ec:87:d8:e9:01:78:b6:3f:ea:00:50:4a:f8:
e3:f0:8b:39:3a:47:56:0d:c4:28:38:9d:6a:c1:4f:15:99:61:
42:eb:68:6f:b5:7d:e0:a6:2b:f7:07:ed:07:64:64:ec:d2:2d:
22:8f:d6:8c:c4:80:75:bc:5b:8f:28:92:63:0b:75:c5:2e:d3:
51:69:32:5d:47:64:a7:c5:7d:a8:7d:70:9f:58:53:60:ad:eb:
32:0f:fe:35:ac:f6:86:68:46:2b:82:67:f1:63:22:b7:59:d4:
d8:bc:f4:b4:bb:59:18:ce:93:0c:10:e2:5f:fe:fe:ca:01:cb:
2e:51:bf:60:b0:cc:ba:d6:43:4a:a8:61:21:7c:a8:f5:6c:6e:
0f:4f:5d:d7:33:22:06:8a:90:35:d9:ae:78:8e:c1:ff:2e:10:
19:59:d3:f2:05:e6:7f:94:25:2a:65:dc:a4:e3:63:c0:35:ce:
ed:a8:ba:3e:ef:78:c6:b0:a9:e4:13:02:d6:ff:18:6b:7f:fb:
37:8b:1d:81:1c:7d:0f:ad:83:fe:da:8d:cf:ae:4e:3e:5e:03:
45:0d:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:22:42 2025 by rpki-client