Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/d14908ec-d831-3c35-9615-8f4b0cf619dc.roa
File: d14908ec-d831-3c35-9615-8f4b0cf619dc.roa (raw, json)
Hash identifier: hzX4aUQEluPH5vsSfVGJK8Lsh+QLJws+NxMSBA39EZw=
Subject key identifier: 31:55:F0:9A:B9:B4:4C:30:45:13:6F:C4:77:88:8E:B0:B1:4C:46:2C
Certificate issuer: /CN=6e8499d4-7126-459b-b6cc-4ca2f542f30c
Certificate serial: 010D0C9F432858487B85B82FC3314B3F9B88BB00
Authority key identifier: 69:E1:F8:2C:A6:89:01:F7:41:DA:56:B7:E7:A0:3F:23:60:F0:DA:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/d14908ec-d831-3c35-9615-8f4b0cf619dc.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 3635
IP address blocks: 192.149.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b8:2f:c3:31:4b:3f:9b:88:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8499d4-7126-459b-b6cc-4ca2f542f30c
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=d20fcf35-c014-4179-938d-52fa4e983865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:a8:2f:76:ff:03:41:aa:be:d3:63:3d:62:
48:c1:14:53:98:35:cc:96:b0:22:97:51:bd:70:32:
4f:f4:d9:ca:d0:f3:f6:3c:cb:f3:08:23:9a:53:64:
7a:73:89:7d:ec:b6:ac:c4:77:38:d3:ca:9d:d2:7e:
06:31:01:16:e4:5b:69:76:51:a2:e1:f5:f3:87:ef:
36:2c:3e:2e:d0:d2:7a:9a:b3:1c:a1:1d:ec:44:95:
4a:0b:31:a7:1f:4c:c7:0a:f0:67:86:63:72:2c:d4:
d7:09:3b:94:69:00:57:87:cd:bb:fb:31:b4:69:a5:
49:cf:ca:a3:cd:80:94:c4:51:aa:70:df:2c:9c:b1:
59:1a:e0:a3:f5:84:56:79:ae:21:ef:54:5f:ef:d9:
85:f2:00:b1:7d:ab:89:15:7d:d7:7d:e6:b8:9e:f3:
a4:8e:c3:fa:92:ec:5b:e8:54:b6:1e:ce:ef:c6:56:
39:a2:36:6e:ff:ea:e0:80:0a:b5:9c:59:f9:2a:df:
6c:74:9f:ec:60:5d:cd:53:e7:eb:49:c5:ed:3c:34:
78:fe:78:2c:57:61:6b:8b:e7:5a:44:3b:00:0d:9a:
a5:7a:83:cc:25:63:51:51:a7:e5:6e:4c:bd:22:f7:
1a:30:0f:a4:23:b1:6b:f2:ba:b7:bc:37:5a:6d:1c:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:55:F0:9A:B9:B4:4C:30:45:13:6F:C4:77:88:8E:B0:B1:4C:46:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/d14908ec-d831-3c35-9615-8f4b0cf619dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/6e8499d4-7126-459b-b6cc-4ca2f542f30c.crl
X509v3 Authority Key Identifier:
keyid:69:E1:F8:2C:A6:89:01:F7:41:DA:56:B7:E7:A0:3F:23:60:F0:DA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.149.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:9b:2c:5b:86:30:d1:ee:6d:a1:79:62:0c:1b:16:25:5d:03:
eb:a5:6b:7a:81:82:71:48:e9:db:ba:3d:07:34:fc:92:04:59:
ad:82:48:c1:86:be:1f:b0:fc:82:a1:f0:92:ea:6b:1e:3c:23:
7b:08:c2:22:ac:69:77:58:d6:0d:2a:b1:36:88:b5:6a:ab:c4:
e3:39:23:25:4a:56:5e:df:96:0f:63:33:04:7d:8f:d3:ca:ee:
ed:78:48:97:a9:73:17:3d:ff:32:3e:ba:16:7b:5a:9c:c0:87:
40:88:ec:12:ac:7f:4b:c5:2a:78:52:18:2d:73:33:8e:32:50:
3d:d6:9b:8e:d4:45:e8:be:1b:03:8e:82:b2:f1:3c:8e:29:8a:
a7:dc:a5:36:c7:60:85:e6:fb:21:25:f8:20:91:f6:ab:e2:f3:
3b:05:2b:10:5a:8a:3e:b4:62:af:76:e9:54:18:f2:39:2f:b9:
46:dc:34:a8:81:b4:e4:0b:e8:88:e6:94:d2:56:cf:4f:94:90:
68:23:43:f6:08:af:9b:74:fc:ca:4f:60:67:17:ea:bf:84:f5:
b3:ad:f8:f9:5a:c1:9f:b8:66:a2:b8:d2:3f:d9:8b:d8:97:5b:
84:04:ed:f1:88:2c:3e:33:bf:8c:db:eb:83:7d:ed:ab:6a:7e:
99:33:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:43:33 2025 by rpki-client