Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
File: 0dbdb44f-ac3e-376f-90dd-5a4848410620.roa (raw, json)
Hash identifier: KnxoCbWlSau3A5UhlwdbRjc4UCRtN/FL58pTaNJ7YrM=
Subject key identifier: 2A:FC:3A:7F:59:BA:4B:A3:B8:46:E9:02:C2:40:DC:DB:12:B6:6B:BD
Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial: 010D0C9F4328584886B0757EE0EF5E311C2F86E0
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 14618
IP address blocks: 192.157.36.0/23 maxlen: 24
2602:f7db::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:75:7e:e0:ef:5e:31:1c:2f:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=50842a6f-71af-4184-a5c2-66759228111c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:e8:9c:7c:2e:8e:bc:20:e2:77:15:c3:9b:
f9:a9:da:bd:7f:73:3f:c8:08:16:2c:cd:5c:a2:c5:
0f:63:1e:ab:7d:b8:e1:17:96:49:19:a7:dd:49:8b:
24:06:ae:5b:18:c4:44:0c:51:49:ef:26:01:99:6a:
1e:c4:53:70:6a:3c:38:b5:11:9f:c6:68:78:84:78:
59:d2:f4:c0:75:b5:f4:38:ed:51:b9:27:9e:cf:5a:
55:ac:0a:ce:e3:8c:82:d8:43:ff:9b:c2:bd:cd:9c:
64:5d:31:9d:22:50:bf:c9:86:97:4f:9b:35:2b:1f:
0b:94:3e:89:2f:a2:25:a8:e8:4b:c0:55:c0:53:18:
2f:5d:e8:e1:1f:0e:94:df:4b:5f:86:d2:b7:b1:3f:
55:a8:38:e9:7e:f5:55:52:a4:14:7c:87:6c:ff:4e:
87:63:07:ee:c5:8a:db:09:f8:a3:bc:28:f4:3d:e7:
22:18:30:a2:8d:e3:b2:25:9f:8b:aa:0e:ba:0f:98:
0f:43:d5:36:85:0a:fc:ef:0b:f9:72:91:da:54:b7:
f8:ef:30:17:b7:94:5a:13:77:b8:ea:1b:7c:a6:2b:
cb:75:2e:e4:0f:37:69:8b:a7:81:c0:6c:4e:37:a3:
61:91:6d:f7:ca:70:c1:91:f9:d9:bf:cc:73:ff:ee:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FC:3A:7F:59:BA:4B:A3:B8:46:E9:02:C2:40:DC:DB:12:B6:6B:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
X509v3 Authority Key Identifier:
keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.36.0/23
IPv6:
2602:f7db::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:a4:61:54:90:82:aa:59:2d:2e:1b:8c:95:0d:46:a2:d6:90:
c2:fb:5f:cc:94:a0:7c:3e:0c:13:cf:7f:ee:4b:53:77:16:a0:
c2:f6:46:20:1f:b0:39:9f:25:1b:f6:7d:1a:c1:34:c4:3a:b2:
04:4c:9a:3c:8e:2d:ab:90:99:3e:7e:ae:22:73:a6:e0:7a:0e:
3c:8a:48:54:50:6c:63:26:f4:6f:19:8c:33:09:30:c3:8f:0d:
e2:a4:a8:35:1a:cf:29:ae:8b:a4:63:1b:7f:60:3e:98:de:36:
b3:f5:b8:ff:27:ea:c3:32:34:d0:cb:c9:58:dd:4f:50:44:28:
47:3b:91:36:d4:a6:1b:01:aa:d4:ae:2d:e9:a9:92:6b:e5:99:
4f:43:e1:10:20:4d:ae:a5:57:fe:78:7e:8f:08:52:31:28:14:
3a:30:0c:12:83:64:cb:fc:06:e2:4d:e1:b8:ce:3a:0c:c7:0f:
2f:d3:82:9b:77:4d:03:21:00:3e:ff:5a:b9:70:00:9d:93:d7:
ff:73:bf:89:42:87:39:37:33:23:92:bd:20:23:4b:f7:3d:ed:
69:8f:3b:da:8e:96:65:86:f9:5c:44:fa:3a:87:5a:88:bf:e3:
60:dd:40:e8:ee:89:37:fd:9c:65:9d:9d:f6:46:5e:ba:53:45:
f2:50:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:20 2025 by rpki-client