Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa
File: 446319b8-ed67-3b03-a0e2-5a949ad2108c.roa (raw, json)
Hash identifier: MXCquhU6wSNPZq33psvvCompS94MERK4IM/G4KvEb3w=
Subject key identifier: D3:3F:35:A0:7F:18:8D:70:2D:B9:7C:8F:E8:56:DF:80:A3:C7:C1:2F
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F4328584858A0515751B05001831623C0
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 3557
IP address blocks: 192.5.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:51:57:51:b0:50:01:83:16:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=ceb3d4fc-57f0-4b14-9295-99128b3efe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:ef:a3:6e:99:8f:6c:e2:b0:c7:bc:ee:f7:
28:ee:d3:14:b9:1a:64:b8:cc:f2:15:55:ae:6b:00:
d3:a9:87:85:d1:13:78:72:4e:c8:04:c5:49:2b:01:
72:ea:82:c2:4c:95:ee:74:bd:13:11:27:62:ef:3c:
5b:f2:d4:2d:aa:27:e0:1b:5e:fe:f2:37:70:99:e7:
1f:bb:ad:14:c0:66:ea:43:10:66:1a:31:f6:44:f9:
03:35:d5:98:ff:d1:54:6f:a5:16:82:f3:bb:7c:cf:
9a:be:6f:2f:ca:47:62:1d:c1:2a:68:49:90:d2:aa:
0a:3b:94:7b:b4:4f:48:e4:58:1a:8d:35:52:e7:9e:
c2:2e:89:9b:2a:60:45:58:dd:b3:74:91:85:ec:2c:
50:38:4c:1d:1d:b3:6b:3e:09:4e:b1:09:40:a3:26:
2c:54:84:87:a7:85:3c:f8:20:74:3d:5d:ef:00:27:
ed:5c:54:39:e1:e3:69:53:07:ee:cc:e0:bb:83:ba:
00:9c:11:af:35:27:01:16:a5:ef:f8:e6:3b:79:65:
57:77:f0:01:64:4a:b2:eb:c8:55:cc:0f:15:b8:aa:
b2:b6:88:57:6e:ff:3a:b4:cc:8c:81:40:47:41:76:
9e:ff:17:7c:88:46:fd:de:ee:57:e6:0c:37:aa:8e:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3F:35:A0:7F:18:8D:70:2D:B9:7C:8F:E8:56:DF:80:A3:C7:C1:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e0:48:1d:ab:67:58:85:bd:ac:ae:69:cc:84:99:be:12:71:
25:c5:09:92:97:b1:a4:66:b8:5e:64:c4:1e:69:af:95:57:1e:
c8:e1:8c:79:fd:d1:3b:64:4f:b2:f2:76:50:9b:8f:48:37:c0:
94:f1:ac:b8:6d:b2:44:50:51:42:85:15:8d:95:18:14:fe:7d:
ea:25:3e:32:df:f0:74:fd:f0:ef:d2:f1:1f:48:8b:ab:4f:c6:
65:eb:24:3f:1e:33:5b:a8:d1:ce:ba:bd:ec:7e:b0:35:30:17:
c0:29:9b:6f:82:46:52:f9:e6:a3:cc:31:c6:03:47:f0:90:90:
30:32:66:14:65:1a:37:17:fc:ba:cf:cc:0d:5c:4c:b7:d3:00:
56:ca:2c:ff:1f:08:c7:aa:97:9a:cc:8a:93:e9:31:a1:3c:26:
f0:f3:0c:5a:08:33:bc:ce:18:3b:bb:72:df:f8:be:be:df:24:
9a:fa:b9:f2:42:0e:78:50:4e:38:08:bb:f2:2c:85:d4:1f:26:
c6:6f:a4:96:77:84:ec:ee:3e:87:ce:38:bc:d8:cb:76:cd:4c:
68:cf:c2:d0:ee:0e:bf:13:f1:c8:f8:09:73:9d:03:01:cd:ba:
bd:fc:40:eb:64:36:9f:7c:8d:5d:be:02:68:f7:79:b4:10:48:
ac:42:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:02:27 2025 by rpki-client