Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2458e98f-1ff6-350f-9640-703dd80e0143.roa
File: 2458e98f-1ff6-350f-9640-703dd80e0143.roa (raw, json)
Hash identifier: WWUjkoDJ2mwqiFb24VrDiGZDzIBlUs2Hs62JJyCvYG8=
Subject key identifier: 5A:FD:E4:47:DA:BE:15:E8:14:60:DD:18:AF:85:AA:20:F6:9B:9F:D3
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C30B6B0A6947551CDCF40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2458e98f-1ff6-350f-9640-703dd80e0143.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 192.154.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:30:b6:b0:a6:94:75:51:cd:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=a7ba8c55-71ae-407d-9780-68d0c4fa03ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:fe:4a:ee:89:5e:cc:86:7e:75:48:6e:d1:
7c:e3:25:58:af:70:6a:54:22:4c:b1:f4:db:b1:6f:
c5:e6:66:4e:95:86:bf:39:0a:bc:10:a6:af:e4:0e:
7f:54:48:a8:df:ac:e0:20:29:47:13:87:8a:8a:62:
4d:70:87:c4:d9:e7:42:c0:f7:65:e8:7a:74:1a:17:
f3:b2:3b:c8:07:ef:3d:ab:9f:07:62:29:22:b9:16:
a6:53:f3:14:9c:9c:38:e5:80:0e:c5:ac:d3:c9:40:
7f:20:fd:5b:2f:60:16:c1:31:b7:1b:aa:bf:84:49:
93:4c:6f:b8:e4:fa:bf:95:f2:19:b3:e0:5f:6d:f0:
32:d8:21:b0:86:d0:d8:aa:bc:17:80:d7:8d:92:24:
4e:4f:de:26:fa:f7:ad:3a:93:c2:4a:04:0b:51:e6:
c6:1d:83:8d:50:2a:19:81:18:85:4a:41:31:6b:1e:
f4:30:48:15:9f:93:b8:67:0a:ff:f3:1d:e6:e4:5c:
35:29:72:34:2e:d7:90:e0:86:0f:14:4d:36:40:2a:
71:f8:fd:3d:70:a1:18:72:a0:09:a9:43:b6:ef:4b:
a3:a0:02:ce:79:8e:ca:3b:f9:4a:2a:4a:d5:fc:25:
ea:fc:28:25:2b:16:af:53:7d:ab:a1:f1:a0:df:33:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FD:E4:47:DA:BE:15:E8:14:60:DD:18:AF:85:AA:20:F6:9B:9F:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2458e98f-1ff6-350f-9640-703dd80e0143.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:08:f8:01:a8:da:d7:17:3d:74:c8:aa:83:99:77:50:20:d0:
d3:30:e9:18:ec:0f:06:bc:0e:3f:2e:60:7b:48:e8:37:1d:c3:
39:45:66:58:f5:46:8d:a8:bd:a6:ce:8e:5f:f5:91:03:e6:c2:
bd:5d:4a:b6:0b:20:76:a2:6e:0a:ed:09:85:5e:6b:63:e7:a8:
f8:70:98:e3:96:17:23:7a:09:8c:a4:36:b8:51:55:ac:cb:79:
b5:40:58:a3:9c:26:e7:c2:3c:86:9a:d3:6e:d8:90:be:8e:8c:
1c:e5:95:1c:e2:32:2e:ed:05:66:cd:2a:f2:d4:69:67:b6:98:
ac:e5:9d:3b:64:f4:4d:3b:9a:80:07:f2:02:c9:86:83:d5:d2:
75:90:5d:1b:95:7d:89:96:95:4b:47:1f:df:14:ad:06:57:2e:
03:14:91:d9:fa:7c:7d:01:89:30:90:7c:de:c2:2b:fd:1f:98:
b6:ae:a1:97:09:64:a3:a4:3d:b0:95:d9:81:6d:39:a4:0a:3b:
3e:21:3f:ca:f5:ee:6c:fd:c8:db:14:bb:e1:31:71:c4:a3:28:
9d:a7:cf:d3:6a:d6:78:00:8c:bf:63:20:34:af:7c:98:8f:fe:
ca:7e:da:67:e3:d8:87:9a:5f:e1:bf:87:e7:0e:2b:33:9a:2b:
b7:0f:da:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:43 2025 by rpki-client