Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d9829ff1-ff9b-3b43-80d2-bb94afca1074.roa
File: d9829ff1-ff9b-3b43-80d2-bb94afca1074.roa (raw, json)
Hash identifier: DlsQb3TiVKnqImv96VQyPA7TpkpaQg6jb/w1jtUda9c=
Subject key identifier: 73:4A:68:93:74:91:04:0C:C6:A3:24:4E:2B:26:25:93:3A:06:E7:3E
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865303DFB1C6795A883314780
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d9829ff1-ff9b-3b43-80d2-bb94afca1074.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 25629
IP address blocks: 192.161.74.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3d:fb:1c:67:95:a8:83:31:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=7aa83280-46e7-4c7d-ac23-7c17de5e411c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:5c:33:1a:db:dc:42:86:44:1b:a2:1b:e9:
c9:29:98:bc:db:f3:5d:7e:75:2d:d5:b3:59:f9:b5:
56:90:9c:ed:94:1c:9a:28:89:cb:76:7e:46:e4:45:
cd:88:8a:29:91:e0:72:83:e8:e7:ae:93:c0:ba:9f:
30:fd:1e:73:83:2d:ef:e6:29:b8:49:59:fc:77:64:
0b:91:52:e9:a0:be:c1:4a:be:37:14:07:5e:79:e8:
5d:3b:40:3b:d7:87:76:db:fa:b3:07:89:b6:48:10:
81:fd:0a:00:b1:2f:51:89:fe:e3:c0:2c:7f:d1:ca:
88:21:02:2b:c9:1d:db:8e:cb:ca:ed:37:28:c4:45:
75:97:1e:b4:be:c9:4f:ee:11:a6:71:79:ab:dc:16:
90:2b:e4:dc:ed:e6:7c:b1:b9:02:24:41:52:ae:c3:
7e:f4:cd:dc:e9:d4:25:b8:82:d1:42:d2:92:55:cd:
e3:89:ae:4c:29:a8:96:ee:ec:01:71:f8:37:95:65:
21:a6:01:c1:15:d0:a1:e4:09:36:a6:55:a1:d1:0f:
eb:5f:31:40:c3:93:eb:12:fe:11:7a:12:e4:67:5b:
9c:fe:45:de:75:82:00:b4:17:e8:7a:56:4e:84:40:
ff:36:d8:5f:22:88:cc:86:be:98:d5:1d:c3:1f:2e:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4A:68:93:74:91:04:0C:C6:A3:24:4E:2B:26:25:93:3A:06:E7:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d9829ff1-ff9b-3b43-80d2-bb94afca1074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
192.161.74.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:e1:72:a9:55:ab:66:4a:f4:b1:6b:0d:1a:5b:ff:cb:75:a0:
e4:85:96:a9:1c:e2:2d:9e:40:66:19:aa:07:3a:18:62:2e:5f:
fc:e6:df:7f:64:4f:0b:3c:2e:02:81:44:1a:b2:8e:2e:e0:04:
0a:25:e2:9e:92:00:b5:4a:46:6a:3e:1a:18:55:80:9f:d7:cb:
15:99:5c:e2:c3:5e:b3:62:1d:f3:5b:65:73:bc:cd:e5:3c:6a:
7b:05:ca:4f:3b:38:16:2e:70:c8:74:45:b0:b4:dc:23:15:45:
65:34:24:c3:24:70:e2:89:fb:85:ab:20:4c:33:f9:e4:c3:06:
10:9e:94:7d:f2:4a:86:e8:d3:53:97:44:a5:7c:ee:49:1e:35:
14:cf:e9:f0:68:8e:08:5b:e4:f4:7e:d4:1c:0a:1c:f9:ec:47:
44:c6:c9:69:14:44:66:2e:a0:00:41:78:1d:3b:2f:42:0e:a4:
9b:74:a2:57:4a:0f:0e:3f:74:d4:97:ce:c8:38:d8:c9:44:fb:
67:b4:0c:fa:e9:ac:18:8c:5d:f8:b3:c8:09:f6:71:5a:21:fb:
47:5d:5c:1d:c0:4d:bb:a9:e7:51:5a:86:e3:20:99:6b:87:b1:
eb:b0:2a:75:d6:f5:28:3b:dc:f8:9e:df:0a:79:d3:ff:53:05:
e4:65:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:22 2025 by rpki-client