Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7ef30390-ac45-3fee-ac6e-47b346b084e3.roa
File: 7ef30390-ac45-3fee-ac6e-47b346b084e3.roa (raw, json)
Hash identifier: ngX+h+JtFi6KSUqK/F+sAGv86JKVip8QjZ9Fkx/wztk=
Subject key identifier: 4E:84:78:BC:AF:C1:AE:7F:FB:8E:8D:93:F9:68:A8:9D:33:0F:9B:3D
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848159FDB75042DEAFAB02F9B80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7ef30390-ac45-3fee-ac6e-47b346b084e3.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 30133
IP address blocks: 192.158.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:db:75:04:2d:ea:fa:b0:2f:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=c251eead-0a99-4388-bff4-2a152a6e46f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:55:5e:2f:ba:63:03:b1:85:b0:43:e6:be:
57:d9:82:6d:ee:98:75:b8:d1:b1:90:75:15:89:09:
50:3f:64:e2:05:43:0b:55:1e:78:36:70:d8:dc:2a:
f4:9b:c2:47:9d:fb:f8:9b:9f:a4:46:7b:0a:6a:a1:
a8:af:fd:f8:6b:2f:94:1e:e7:98:82:27:4b:be:03:
35:dd:9f:50:69:a9:2a:70:a1:45:90:2d:51:71:c0:
61:96:c6:fb:e3:1f:8c:ce:4d:f8:ee:cb:f1:cc:e2:
d9:d8:1d:fd:2c:0c:f9:9c:34:ff:ba:c0:37:23:a3:
49:aa:23:65:ce:f7:bd:82:a3:29:85:c8:f6:dc:f9:
27:3c:ca:55:4f:06:4b:b7:85:5e:22:a6:c1:66:a1:
13:a0:1d:d8:75:00:e0:6a:3e:ba:a0:b9:f5:a8:e1:
5d:c7:a8:38:4f:c1:36:88:36:aa:c1:bb:60:ca:1d:
1f:d1:60:ff:8e:30:6c:dd:6f:76:a8:08:60:22:0a:
b6:88:d2:6a:87:6c:67:6b:90:ab:9d:f7:c7:a3:cc:
77:a6:ef:e3:4e:09:23:55:64:6a:fd:71:86:9f:fc:
5c:fd:e5:0f:ad:eb:53:29:24:36:81:28:16:21:a2:
aa:29:e6:fb:e1:3e:5f:55:e4:d5:f1:58:5d:2a:3f:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:84:78:BC:AF:C1:AE:7F:FB:8E:8D:93:F9:68:A8:9D:33:0F:9B:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7ef30390-ac45-3fee-ac6e-47b346b084e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
192.158.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:a4:56:45:09:f9:b1:f4:31:da:d4:34:49:ba:e8:88:bd:32:
2c:77:60:60:db:bc:87:ad:d7:dd:cb:bc:98:7d:78:74:c3:50:
66:50:7b:6b:3a:15:2a:03:94:d3:f9:95:ff:6a:28:ff:2b:68:
9d:ac:3d:25:47:21:04:0e:e5:30:d9:9f:e9:a5:5b:97:52:1b:
23:9a:c3:bc:0e:4d:ee:49:fe:53:8e:a4:b4:47:05:c4:f5:97:
be:59:1c:d6:74:f0:84:72:9d:4a:cb:d8:b9:99:48:e8:5f:54:
7b:53:40:9d:f5:cc:39:b1:ea:b2:ce:1f:2e:8e:7d:d7:7c:dd:
b4:c4:25:7a:67:ab:78:4d:da:76:1e:a9:83:af:37:de:2e:6d:
e6:71:78:a9:96:b0:e4:48:14:6c:58:1c:58:49:65:67:7f:5b:
b6:05:98:84:25:90:78:db:7c:1a:6f:42:97:67:0f:85:ff:4c:
39:ee:63:8e:f7:f2:6a:75:5c:7e:f0:bd:7a:e5:64:37:11:dd:
08:0d:e4:b8:08:81:b1:e1:d4:84:ce:1e:b9:0d:92:6c:51:88:
ec:d2:14:5e:b0:23:07:a4:04:d8:31:36:83:1a:e5:14:0d:ea:
50:fc:35:15:3b:6d:fd:56:27:0d:6e:36:ec:2e:96:cd:76:aa:
0a:13:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:28 2025 by rpki-client