Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa
File: 63c48833-2603-30da-8097-8c1712221517.roa (raw, json)
Hash identifier: oiICgGAciUm9v7aP0uCiDQOP25+5LCq0q8D02MrK4Ao=
Subject key identifier: 62:36:78:A5:02:6A:8F:FB:A7:FC:3C:27:64:EF:CA:D9:97:79:C5:C8
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848143A74E432994735A1AF16C0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 30128
IP address blocks: 192.228.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:74:e4:32:99:47:35:a1:af:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=35641ce9-044d-4c00-aef3-5e59ad1a3930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:af:44:69:af:0f:6e:3d:86:bb:21:1b:47:0b:
fe:37:66:67:ab:af:51:b0:f8:60:a1:f2:ea:d8:0c:
cb:87:c7:66:d4:db:3b:36:a0:41:d4:df:85:2f:fa:
62:18:68:ab:83:53:8a:08:a7:ad:1c:a4:fb:b6:79:
b1:9b:95:d4:a2:75:98:76:f8:11:a6:64:53:e4:b1:
5e:63:de:fe:f1:5b:5b:56:e9:75:be:02:0b:51:ec:
6a:a9:61:ec:6d:80:bc:f5:f2:25:07:a4:79:dd:75:
69:da:0b:4a:5c:00:22:95:14:54:17:05:f9:cf:8b:
92:0f:50:31:b7:87:63:50:70:73:0c:85:42:be:fb:
9e:90:9b:16:40:6b:3d:0d:3f:82:cb:38:0b:ac:96:
18:eb:72:9d:68:64:60:66:84:15:0c:c7:83:2d:15:
6d:c0:5c:d9:07:15:26:37:6a:4b:d8:7f:ee:e7:f2:
ee:1e:11:bf:a2:d1:b9:6a:f8:b4:23:dd:fe:eb:19:
59:41:cb:97:ca:62:b2:3f:92:14:8c:5a:d8:15:c8:
81:ef:d3:1d:60:0d:e9:36:ff:2d:2e:c1:d9:5b:7a:
1e:d3:14:2e:54:03:6a:2b:b1:6a:3b:91:2d:b8:e4:
24:3d:95:6b:8e:3a:46:29:57:34:ca:77:74:14:ec:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:36:78:A5:02:6A:8F:FB:A7:FC:3C:27:64:EF:CA:D9:97:79:C5:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
192.228.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:33:b8:9e:eb:6a:39:46:8e:5b:df:86:e5:0e:dd:eb:19:40:
e8:38:b5:96:f2:f7:43:92:a4:5c:17:1a:2c:f7:b4:7a:4b:6e:
9d:08:dd:b1:30:31:91:22:fb:52:16:cd:58:13:f7:8f:c0:3d:
59:98:13:b6:92:75:de:bd:7d:4d:c0:54:b1:29:e1:ef:8c:83:
7a:0b:fd:da:78:24:50:74:bb:22:dd:67:4e:dd:d8:76:2d:0c:
ab:89:af:ae:4e:59:ba:65:40:07:f5:c9:36:c8:e2:4e:4d:62:
94:87:dc:f6:1b:de:64:7a:2c:d9:4c:83:84:84:61:b5:87:d2:
b1:c8:09:f0:17:bb:2e:ac:98:b4:ec:73:93:1c:a1:ba:98:9e:
22:83:6b:39:df:4b:85:15:c9:e7:8d:b9:22:89:5d:b1:ec:6f:
9d:6a:07:d8:82:e1:07:14:70:98:52:bf:92:b1:5f:10:56:72:
78:f7:1c:0c:4d:d9:b2:60:bd:c5:b7:b6:ca:e2:23:48:70:fa:
1c:ca:76:e1:55:d7:0a:0f:0f:3e:84:ec:c3:c1:8f:7c:25:11:
b8:2e:9e:93:f5:d8:69:95:c1:43:78:16:5c:fb:a0:05:cf:3b:
65:d0:ab:59:b2:86:5b:3d:00:42:3f:f6:be:cb:cb:ff:26:12:
bc:6d:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:56:52 2025 by rpki-client