Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2306fa50-e99c-329c-a6c7-32d24a65868c.roa
File: 2306fa50-e99c-329c-a6c7-32d24a65868c.roa (raw, json)
Hash identifier: DQ9yju1j3TPba4eZNxGWF32Oz7mOKgG8KtNeMJ49ymI=
Subject key identifier: FC:A5:25:6B:78:02:70:97:29:AC:7D:E5:C3:FB:33:A5:63:7B:66:97
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858482A8FE0CD9F0715580286BA00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2306fa50-e99c-329c-a6c7-32d24a65868c.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 394437
IP address blocks: 141.193.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e0:cd:9f:07:15:58:02:86:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=a4ffcea8-9981-407b-bb16-4acb7d60e8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d3:92:b5:29:64:9a:bc:77:2c:f4:6d:8b:fe:
83:19:e7:76:5a:7d:d7:90:4f:f3:88:3a:68:3d:b5:
bc:b1:3e:47:bb:90:0e:2f:e9:49:a4:ae:a0:b5:51:
6c:bc:74:e6:bb:7a:2c:47:68:26:6d:cb:34:16:08:
e3:c2:89:d5:03:aa:2a:7a:91:33:a7:0e:8d:ce:ed:
44:f5:7d:e4:a3:82:c6:21:69:30:d1:a2:68:68:c9:
09:50:15:a6:39:b3:73:90:e4:e8:da:82:64:d4:07:
ef:d2:4c:c3:1a:bf:35:20:57:25:6b:20:fe:a0:26:
1e:31:e0:14:8b:99:fe:1d:40:e3:92:f6:28:42:1a:
aa:a7:6b:77:3c:d3:dd:c4:e7:3c:ba:6a:4a:6e:a3:
a6:dc:2d:fd:25:a0:45:cf:2e:6a:a0:ac:81:2e:56:
b9:fb:e4:ad:be:1a:60:01:96:6d:80:5e:4f:36:df:
46:67:3a:b7:ef:cb:47:2b:cf:56:2e:01:af:cc:2f:
18:ef:65:6d:fd:4f:d8:89:d4:8b:66:35:30:82:9e:
0e:37:0c:20:26:a5:19:54:55:8a:9a:bb:87:0e:f8:
3a:23:92:95:94:96:d5:d5:39:6d:3b:cd:23:3c:40:
b8:af:39:7c:72:b4:57:57:7f:7b:c6:f4:99:b5:c2:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A5:25:6B:78:02:70:97:29:AC:7D:E5:C3:FB:33:A5:63:7B:66:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2306fa50-e99c-329c-a6c7-32d24a65868c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:4b:9e:b6:cf:56:78:5f:e5:8d:e8:f0:fb:22:81:28:6b:e5:
e5:1c:88:e4:92:63:6b:7f:d6:a1:1d:6d:71:05:55:ca:6b:a6:
b7:c3:09:77:1f:c9:76:4e:32:69:fe:40:af:a1:dc:08:8f:14:
c6:fe:4a:c5:2e:f4:24:f4:fb:55:2e:60:eb:85:93:0e:b7:d1:
0f:01:de:2a:ce:5f:be:09:57:71:07:eb:b7:bf:61:b9:41:bd:
cb:e9:50:e0:a2:b5:33:b6:e3:17:b0:2b:3c:15:31:cc:75:43:
16:9c:d7:02:b8:0f:70:15:0c:f1:57:88:20:ef:a1:f0:bc:84:
4f:6d:09:90:41:8e:09:6f:33:20:f9:f2:89:27:7b:60:f8:a3:
31:74:1e:d3:1e:24:38:b1:2b:bb:da:d2:51:b9:6b:5d:6d:a0:
51:1f:f1:8c:b8:2a:17:89:15:41:b3:70:0f:3f:b5:bf:77:1a:
08:9c:f8:6d:cb:72:dc:57:58:c7:8a:f4:91:1f:6a:23:72:19:
5b:63:0b:d1:50:ac:c1:d7:b5:66:05:f8:9e:f6:01:cd:fe:5c:
5e:85:fe:02:df:b6:ac:6b:bb:7b:34:ad:a6:3f:62:d6:78:04:
3a:16:ee:7b:a3:45:87:61:71:cd:d0:df:d6:15:4b:6e:b1:fa:
d3:12:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:52:36 2025 by rpki-client