Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/2ed801f0-0a9a-3ab3-9e51-34c5c80585e6.roa
File: 2ed801f0-0a9a-3ab3-9e51-34c5c80585e6.roa (raw, json)
Hash identifier: tWutNdYyWBqaM2JzcXTS2NdaVnjSbjtAtEUBVrX+SNI=
Subject key identifier: B2:F4:A9:81:A4:37:1D:AD:7B:E8:32:86:F0:5E:7C:DE:19:D6:8D:A6
Certificate issuer: /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Certificate serial: 010D0C9F4328584875F057641BA7B777799EBA80
Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/2ed801f0-0a9a-3ab3-9e51-34c5c80585e6.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 8075
IP address blocks: 192.0.58.0/24 maxlen: 24
192.0.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:57:64:1b:a7:b7:77:79:9e:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=c951a0d7-c2a6-4bcb-b9cd-d2008f12a523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:0d:01:c5:9a:fe:4b:aa:0f:ba:1b:4f:74:
da:10:68:be:8a:a4:53:95:85:29:cb:56:28:a3:f6:
81:4e:90:a8:27:c9:a8:39:2f:23:ef:f3:ef:47:1e:
c1:1a:57:ad:84:0b:d3:bd:a3:d4:af:4c:47:9b:e5:
12:32:a3:f4:83:f7:a7:55:94:96:1c:75:c6:8a:d9:
a3:3e:ca:cb:c2:8c:02:d4:50:10:04:62:96:20:d3:
61:ae:55:c7:39:61:65:2a:27:46:51:61:63:82:27:
e1:f9:14:5c:c1:c7:7d:e3:d1:8e:d9:96:22:ce:9d:
ed:30:03:a1:c4:cc:84:98:31:92:f8:38:93:46:2c:
70:ab:78:f6:96:65:56:6f:8b:02:cc:af:86:a5:62:
82:49:60:5f:d3:09:08:6b:23:27:d0:ea:57:65:a0:
1f:e0:57:ad:a1:69:96:af:28:e4:40:16:03:f9:84:
88:9c:f3:e0:b8:3d:b8:c5:8c:c7:6b:31:97:0e:b9:
ef:03:bc:01:ba:c3:c3:f4:9c:90:c2:43:8a:73:03:
50:29:e2:50:02:f9:79:65:55:0c:94:c7:75:d1:f8:
8e:e0:a6:51:b1:06:f2:ef:77:a2:bf:03:93:85:02:
8f:2d:d4:52:16:17:a7:50:95:65:8c:d6:62:19:06:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F4:A9:81:A4:37:1D:AD:7B:E8:32:86:F0:5E:7C:DE:19:D6:8D:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/2ed801f0-0a9a-3ab3-9e51-34c5c80585e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl
X509v3 Authority Key Identifier:
keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
sbgp-ipAddrBlock: critical
IPv4:
192.0.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:2e:12:3c:aa:57:e1:dc:b0:5f:75:4d:56:31:71:ae:68:2e:
19:29:4d:0a:2b:ba:b6:3c:e6:e9:2e:66:94:45:f8:83:71:d1:
0d:09:38:65:66:90:52:d8:c3:a9:ed:12:fc:21:5f:91:e0:b3:
e1:4e:25:75:50:29:f3:5d:fe:f2:f8:c5:51:2c:bd:36:5c:57:
5a:7b:2b:88:96:6d:06:35:7d:ca:91:92:e3:0f:ff:9f:ee:30:
6e:ff:e5:bb:c2:c9:03:5b:89:25:ea:f4:b1:6f:6a:10:0f:6a:
8f:d0:7d:06:b7:b4:1c:d9:6e:27:4d:b1:92:78:e1:75:e8:b0:
d5:f8:20:10:79:6d:c4:7e:91:86:74:92:c4:4d:65:a1:12:4c:
b6:71:ba:7b:2c:e9:b6:5f:16:9d:ab:5c:e4:34:08:15:ce:4c:
73:c6:87:a8:d0:c3:3e:7c:2b:de:0a:b9:6b:c0:97:fd:e2:15:
f1:3e:58:f8:6d:38:39:82:cc:e1:62:1e:d2:a2:4f:db:fc:95:
fa:83:2d:b8:42:e8:c9:65:3d:e0:e5:52:5e:e5:e5:ab:89:77:
d7:c5:9c:74:5b:84:92:78:ff:33:b6:26:37:50:e9:92:fa:3f:
27:d6:ee:03:28:a8:be:5d:2c:21:09:a4:d1:dc:3e:de:72:f7:
4b:44:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:21 2025 by rpki-client