Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa
File: bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa (raw, json)
Hash identifier: IqYZvw5sdtLaaTpqScgP33/2SmqvXveQXMbLRacKENU=
Subject key identifier: 23:0E:F8:41:8C:9E:94:2D:E5:90:1A:6B:E2:D0:80:C2:D6:B5:31:A2
Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial: 010D0C9F4328584812D537FFFB67A6176FAAC680
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 26677
IP address blocks: 192.197.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:37:ff:fb:67:a6:17:6f:aa:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=d2600e53-c6c3-4d13-8af7-249c30925669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:36:7f:3e:b9:18:5b:c5:36:35:6e:92:74:
07:a9:f8:5c:67:3f:47:e3:20:96:0b:ae:ea:0f:ee:
b7:52:6a:da:ca:02:78:70:fb:5f:cb:0e:c9:4f:89:
5a:22:f9:cd:ca:be:0f:67:c7:5c:df:63:17:1c:e9:
b7:17:ec:a6:0c:6c:d0:cd:46:b5:ac:ef:72:8f:a0:
90:75:0f:90:0d:d4:0a:50:59:37:ce:96:b8:a7:98:
b7:5f:2e:62:42:5c:5f:50:7e:2e:80:62:bb:19:d8:
aa:67:72:fc:a0:90:39:c2:7b:cb:99:2a:e2:0f:e7:
50:b2:a5:fe:e7:14:2a:70:fa:ef:13:da:1e:0d:9b:
b3:e7:01:45:ff:51:c1:bf:d4:36:79:8b:b4:ec:fd:
66:2e:c4:41:43:9d:1b:85:aa:f9:65:30:87:cd:2e:
f8:f3:b0:48:11:be:c1:60:0b:e5:02:e4:b2:b2:89:
15:bd:58:c3:0d:db:a7:fb:54:4e:26:23:ac:d7:b1:
de:57:1e:85:fc:11:ce:fb:4a:a4:bf:b7:bb:60:e9:
4c:95:94:91:49:03:1d:3b:5b:69:eb:e4:10:a7:87:
34:bb:b1:66:c9:b4:d9:00:5c:3f:2a:71:d1:a3:42:
fa:ad:25:6d:f7:da:88:e6:c4:f4:68:c2:39:6e:0d:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0E:F8:41:8C:9E:94:2D:E5:90:1A:6B:E2:D0:80:C2:D6:B5:31:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
X509v3 Authority Key Identifier:
keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ff:b7:31:c5:4d:d0:e6:29:3a:7e:f8:77:c5:fb:90:29:c0:
6b:9e:40:e5:fc:4c:17:d3:3d:20:c2:99:32:a8:ae:11:8c:54:
ae:6c:c4:87:05:c5:bc:b9:8a:79:5e:ff:a0:da:2a:5a:06:28:
39:28:d0:19:f7:79:09:62:e4:f0:b6:3a:50:f4:fd:7b:60:69:
c0:41:eb:77:34:bc:9b:c3:81:ce:82:ad:c8:75:18:60:a5:2f:
21:64:d1:3f:e4:42:1d:f6:a7:eb:71:d4:56:0c:6c:d5:62:3d:
03:93:d2:37:f5:81:fc:02:34:e8:4e:bf:5e:2e:ac:99:9c:e6:
7b:4a:2c:47:d7:a6:9a:0c:41:06:49:cf:79:2b:06:88:05:2f:
fb:b8:c6:ff:5e:61:3a:ce:98:91:0b:00:7b:92:ef:40:7d:c2:
5e:6a:22:0d:81:69:b2:cc:9f:a1:53:ec:38:2a:cc:1f:96:2a:
1f:0a:ec:0d:40:76:39:37:e6:d4:20:17:59:e9:4b:5c:da:a8:
bb:8c:84:70:f4:d7:b2:3f:7d:d5:0f:6f:96:49:a7:72:3e:55:
53:59:ed:cf:1d:b6:e2:d2:ec:f8:1e:de:f4:49:83:43:0a:76:
8a:54:93:b8:db:56:cc:30:de:dc:a1:7c:56:fa:5a:48:24:56:
d0:b2:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:53 2025 by rpki-client