Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa
File: 96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa (raw, json)
Hash identifier: i671KW0sF+NzWgc9LWZYoYwYvskEu0YRpDZ+IQsl/Z4=
Subject key identifier: 3F:52:0D:26:75:48:B7:3A:C6:9E:62:A2:BF:5B:18:72:42:64:BC:94
Certificate issuer: /CN=fba63dff-a873-460d-a7e8-ce4e073bce67
Certificate serial: 010D0C9F432858484C103276BFE8D305FF754B00
Authority key identifier: 1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 14661
IP address blocks: 192.26.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:32:76:bf:e8:d3:05:ff:75:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba63dff-a873-460d-a7e8-ce4e073bce67
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1cf8e1a2-85c8-471b-8de1-460a2bf39f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:e2:d5:3c:c4:48:b5:3c:1b:7c:27:98:e3:
be:28:17:08:87:b8:f1:d5:dd:e7:c4:ce:71:98:1e:
92:75:45:b0:20:3d:fc:91:67:a0:6d:cf:11:56:93:
c0:14:dc:37:83:4f:39:23:e2:45:f9:6f:38:4a:00:
41:5f:03:a1:be:0d:a3:7c:10:df:ed:cf:35:15:fe:
e6:15:37:33:45:ff:66:ce:10:99:bf:79:e4:55:b6:
c1:30:ab:8c:02:fb:e0:1e:65:c1:bb:b1:a8:c9:a7:
dd:10:0c:75:43:02:c9:5a:f4:85:e9:e7:a6:4c:83:
c3:cd:7e:63:2f:80:f2:30:c7:4e:a4:89:8c:5e:78:
c9:fd:df:8f:cc:41:89:67:26:aa:8b:65:af:0e:b0:
ca:9e:df:8d:2e:65:10:99:fb:69:a4:a8:58:b2:16:
69:fc:ca:8f:5a:7f:61:1a:d6:6f:0b:41:f6:a5:4b:
89:c3:7e:5f:ea:13:b6:45:4b:1e:b6:e8:ff:3f:9b:
85:38:dd:0c:9b:22:06:91:2c:6e:f7:2e:65:a2:5b:
e7:1e:89:96:15:d3:5b:db:33:12:c1:fb:f8:52:58:
1d:d5:ee:d2:33:04:63:1f:17:4c:88:3e:cc:c2:87:
db:03:cb:d0:2b:76:4c:9d:4f:02:e2:8f:cc:5a:58:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:52:0D:26:75:48:B7:3A:C6:9E:62:A2:BF:5B:18:72:42:64:BC:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl
X509v3 Authority Key Identifier:
keyid:1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
sbgp-ipAddrBlock: critical
IPv4:
192.26.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:de:d2:6d:2b:b4:f5:9b:f0:db:40:d3:09:3f:b1:bd:c3:b6:
e8:44:8d:71:e4:78:64:42:1e:ed:e0:0d:28:71:29:d0:33:a4:
21:84:3f:57:dc:03:4a:e2:bd:26:74:85:10:a2:3b:21:c2:74:
10:cb:ba:9d:3c:24:14:b0:00:96:3d:c9:ea:4a:b4:e2:b2:ea:
b6:7d:ed:a3:e3:98:0d:b2:55:d9:75:3d:af:c3:3a:f4:2c:bf:
83:eb:c7:0b:4e:0b:c3:0e:15:a1:da:09:2f:85:12:df:0a:ed:
8d:e0:62:26:75:9c:e3:95:d5:62:63:a4:6a:9d:45:8c:77:8b:
bf:2f:94:86:8b:25:bd:a8:9e:f4:d8:d0:7c:1a:d3:4a:0a:de:
9d:1b:d7:f7:35:8e:25:93:8d:a0:4a:24:9c:d9:16:7d:78:3b:
c4:a0:d8:01:ca:4f:41:58:d2:40:44:35:3b:f1:85:87:80:5a:
93:e5:88:18:f9:b9:d7:ac:25:00:26:45:9e:ea:72:56:11:c1:
1f:d3:19:41:7f:63:e4:88:8a:7c:81:0e:6a:61:40:65:a5:85:
16:09:79:71:98:5e:71:20:84:64:84:2a:95:54:d0:43:7c:81:
39:d8:36:11:68:b6:d7:59:4c:c7:e3:93:cb:5d:ef:bb:4f:d9:
d2:76:0b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:00:19 2025 by rpki-client