Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa
File: 1c801033-394b-322a-bebc-f2d3a732f913.roa (raw, json)
Hash identifier: 7Fq5rKoxqGtX8TNzFbdHLwut5cO4LDoCEqQQhrv99dA=
Subject key identifier: 19:4B:55:10:E7:91:14:6A:82:37:5C:74:29:D4:50:8D:4B:D8:F8:95
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848159FDB64C2695265D3242B80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 30133
IP address blocks: 192.158.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:db:64:c2:69:52:65:d3:24:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=a228aa32-2477-4ee5-ba4d-0d613c03008e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8f:e1:b1:0a:4c:26:de:2d:4a:7c:ca:35:e6:
20:8e:1d:98:21:42:5b:ef:2a:33:c5:fc:6b:ac:8a:
54:07:0f:1f:32:7e:33:c6:05:e4:ea:ff:ca:bd:77:
18:c3:ce:17:2e:c7:cf:89:e5:59:fd:f3:3d:b7:d2:
70:7d:78:de:e0:4d:04:68:e1:84:4f:89:61:b9:32:
87:c4:6d:6c:86:e5:95:a1:33:fd:e1:5c:9c:1a:d1:
84:fb:01:44:0d:98:58:90:3e:ee:2f:33:99:13:8c:
17:d5:a9:e6:bb:55:1b:97:32:b5:eb:85:2c:22:29:
4c:5a:ed:ad:8a:ff:df:2e:bb:9e:ab:88:3a:73:a3:
d5:d0:04:bc:65:3c:1d:eb:bc:98:41:d9:46:2b:9a:
08:7d:36:81:45:fe:93:89:c3:46:97:d5:22:b4:4b:
98:5d:7f:79:5a:fc:b1:71:4b:ea:ed:0f:aa:44:19:
ae:a4:73:1c:0d:d1:aa:13:eb:97:29:11:35:46:c1:
3f:6f:c0:26:84:44:7a:ca:d3:5b:0e:c8:31:dc:cc:
d9:57:60:f3:49:d2:49:0e:cc:1a:50:39:a5:7d:ed:
3a:46:ce:56:70:a7:22:8f:da:4e:52:3b:bc:a0:8d:
5b:af:a2:8a:d6:fb:8b:88:51:82:81:5f:37:3b:91:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4B:55:10:E7:91:14:6A:82:37:5C:74:29:D4:50:8D:4B:D8:F8:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
192.158.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:2b:be:43:6e:28:16:1c:c3:de:62:29:7c:3f:37:d7:88:a1:
05:5f:95:bf:1c:cc:37:1f:8c:71:ca:c8:7b:e8:1c:86:18:ab:
4a:e0:aa:35:0b:4a:ba:f5:06:d3:e6:88:6d:19:33:7f:01:da:
e9:b8:59:9c:91:dc:1a:fe:41:20:d3:57:50:44:29:e3:10:37:
ca:46:0f:37:8f:56:a3:57:64:3f:e3:0f:d7:e7:31:86:d7:df:
56:77:9e:48:ce:74:28:23:07:18:35:a0:0f:18:d5:7b:f4:22:
c6:f3:94:63:32:57:d6:2e:9a:63:e0:7c:cc:3a:56:5f:4c:7e:
4f:53:3c:6d:2a:a2:3f:10:67:a7:10:8e:94:53:9b:50:06:d7:
1c:aa:68:52:b6:55:36:69:c6:dd:b5:f9:cb:78:64:eb:03:b7:
8b:69:ab:5b:32:ce:dd:b6:f2:fc:ca:3a:d4:47:24:d8:67:bf:
8d:95:8c:b4:4a:8b:00:a9:48:56:8b:ea:a0:7d:6d:1a:b5:a4:
31:c4:ed:7f:d1:17:48:7e:50:fa:c2:cd:0b:c2:db:b7:f1:54:
70:79:72:06:45:39:ed:f6:6c:99:f3:5e:20:e8:b7:73:29:2f:
5c:50:71:69:17:26:f4:b1:a8:3f:51:67:aa:f0:ae:a1:5f:bb:
ef:6d:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:19 2025 by rpki-client