Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa
File: 2094b4f3-9720-3bee-8fcd-e854d365402a.roa (raw, json)
Hash identifier: qT9ZiAb57wYFNkjk8E+uiCuQxU82UnQiY/kWDr76iXs=
Subject key identifier: A2:85:00:CF:E1:C3:19:C1:99:67:61:70:38:30:90:26:9D:68:36:6E
Certificate issuer: /CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e
Certificate serial: 010D0C9F432858480EA503F877367C873565A400
Authority key identifier: EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 393877
IP address blocks: 192.133.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:03:f8:77:36:7c:87:35:65:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=0cfe4633-13eb-458d-8a5a-99cff1b8201c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:4e:21:80:60:af:ee:1c:6d:bf:df:87:19:
15:f0:9d:34:38:07:93:b3:50:5a:e5:1d:57:7d:27:
44:ae:50:1f:e5:17:25:cb:3b:d3:8f:ae:ae:5f:d8:
28:b2:d6:cb:27:f7:75:91:11:a7:96:d1:5e:b2:42:
db:19:b2:46:f8:5e:98:79:e0:47:3b:7f:66:42:a5:
8a:07:e7:42:b9:4c:0e:07:02:b5:e0:d6:2d:e0:77:
2e:a7:c2:42:6c:a5:db:09:e9:02:0e:69:7e:64:25:
8d:ab:1d:7a:a9:07:81:f3:db:ab:d1:0f:b2:48:cd:
67:0c:2f:bb:12:ab:31:db:b4:27:a4:c9:12:1f:da:
eb:cd:5a:07:80:34:05:92:4d:91:86:7f:34:f0:90:
a6:6d:0d:f0:24:36:0f:6e:c5:b7:81:7a:ff:f1:42:
06:7d:74:b7:bd:f1:30:79:3c:4c:89:ea:f5:75:9a:
f2:b3:8b:b6:80:9d:32:27:04:bd:91:30:bc:8e:0d:
e5:5e:55:db:a9:4d:41:05:d1:a3:bc:b5:18:02:35:
b2:90:7e:b8:f9:a6:e1:f6:d1:51:48:ae:c8:5f:ab:
d3:e4:a4:94:14:b9:db:83:16:bf:f9:e4:56:c8:26:
c1:6f:8d:61:b0:bb:62:30:dc:69:12:c3:d3:dd:df:
02:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:85:00:CF:E1:C3:19:C1:99:67:61:70:38:30:90:26:9D:68:36:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl
X509v3 Authority Key Identifier:
keyid:EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.133.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:77:64:8e:9d:43:d8:20:e8:a6:8e:f2:ed:e5:1c:56:25:3e:
8c:31:c4:0e:1e:13:50:3b:ad:2e:78:32:5f:e8:0a:97:e7:8b:
6e:e7:d1:fb:77:f6:b7:b7:f5:e1:76:b3:d6:eb:a1:88:f0:e5:
9d:8a:24:43:53:74:00:8f:fe:b8:65:81:b9:e2:eb:ad:54:6c:
dc:d8:95:f6:f5:8a:9c:8f:d3:58:0d:6d:b9:ea:e2:97:7a:82:
2a:fb:a3:12:04:fa:ad:d1:a5:71:96:e3:27:68:94:9c:4f:92:
93:ed:ea:81:95:fe:e0:64:97:22:08:c7:1f:70:d3:4e:84:4c:
3b:c5:33:84:86:80:a0:b3:78:cb:55:f6:f0:45:99:61:e1:97:
58:41:52:4e:a3:18:0d:0c:e8:38:6f:5b:9d:89:f4:cb:d7:32:
63:74:e3:d4:cd:70:c2:e4:6d:79:af:0b:ab:ad:0f:21:d9:c1:
91:cf:9f:ed:5b:34:c7:0a:3a:f7:c4:7b:1c:63:40:fa:61:69:
cc:d9:2a:dd:1a:28:0d:d3:31:d0:1d:a1:0c:5b:72:e6:a6:53:
98:04:42:3c:23:eb:71:56:4f:61:64:07:c1:72:4f:4f:43:c9:
77:f8:af:9f:d4:28:ad:a1:55:61:a9:c4:68:b9:1d:c6:2f:d1:
71:3c:f2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:12 2025 by rpki-client