Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa
File: 9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa (raw, json)
Hash identifier: 2bLqCPtyCL/xV4l4BN+reMRGTGlCjiVirXt/yu7QBcQ=
Subject key identifier: 26:E3:25:72:70:D5:EB:84:C5:1E:A5:64:88:A9:38:EF:DE:B1:88:66
Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial: 010D0C9F432858486EF5BCA6CA49BF6D23A072A0
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 394625
IP address blocks: 185.240.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:bc:a6:ca:49:bf:6d:23:a0:72:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=9851a3d4-c19c-45ef-a0a3-a1f033b11ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:01:4d:53:20:9f:22:a9:ca:d3:b8:60:3d:
7a:26:61:17:dc:2a:8a:2e:0b:f7:50:6d:c8:a0:ac:
9d:03:69:60:e5:6c:ef:97:86:1a:24:27:a6:e8:1f:
bb:a9:65:59:cb:61:d5:ae:d5:d0:46:3e:4f:04:94:
88:1f:67:0b:35:61:9a:e6:18:77:63:d6:ec:e3:11:
b5:a2:83:f0:4d:c0:67:9b:62:01:2e:24:f5:c7:5d:
de:64:8b:a7:fa:79:08:5f:93:ca:b1:e8:69:d9:bc:
3a:42:86:81:27:99:ba:0d:dd:d1:c9:46:c2:73:c5:
6d:35:b6:2a:44:21:04:51:2f:fa:02:6d:12:d4:d1:
66:69:40:28:8f:01:49:91:ee:35:50:e4:1e:0c:f7:
b5:f6:ce:03:c2:7b:9c:9b:b4:7b:51:9d:0d:9e:15:
55:d9:24:61:fd:13:09:06:65:bc:85:0a:5f:3c:97:
31:82:01:01:d3:17:54:f2:f1:e0:76:29:22:aa:7b:
96:d1:a0:74:44:5e:9e:24:45:b4:f2:39:23:cb:18:
05:cb:75:fc:97:6f:3c:20:1b:e7:70:c3:ae:0d:08:
ac:80:aa:aa:a1:cb:78:3f:85:db:73:c4:a3:3a:dc:
a5:1d:0a:aa:7f:95:3e:ad:6e:76:e4:77:34:6c:67:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E3:25:72:70:D5:EB:84:C5:1E:A5:64:88:A9:38:EF:DE:B1:88:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
X509v3 Authority Key Identifier:
keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
sbgp-ipAddrBlock: critical
IPv4:
185.240.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:ca:0a:1c:95:28:b0:0a:f9:f1:31:c3:e2:8f:81:6f:dd:1f:
36:ca:ee:df:e7:53:ee:e6:78:0a:7b:36:3e:6d:f7:a0:8e:0f:
f2:6c:b4:8c:99:83:4c:e3:b6:46:55:15:57:f1:7d:23:fb:b6:
45:38:24:82:50:97:a6:0e:29:4c:6a:e7:e9:08:76:4a:ce:d0:
bb:46:36:fd:49:54:88:0e:b6:09:30:39:1d:12:35:75:56:ec:
31:af:0d:76:50:ae:69:20:b3:f3:37:93:0e:9e:8d:11:a5:95:
f9:05:db:7f:b2:c0:0d:fc:f2:8b:67:b4:4b:49:c8:9b:09:26:
b4:a1:93:60:87:f6:a8:3e:dd:c3:12:5d:ff:f3:34:ef:37:49:
bc:90:5e:25:f5:6a:08:6e:67:bb:b5:bb:0b:ec:b7:e7:fa:2c:
09:9f:20:f9:09:55:64:a1:df:d5:8d:08:62:fc:d7:35:82:44:
19:0e:c4:49:7e:6f:0a:60:93:61:bd:22:cd:c7:3d:2a:73:07:
8d:dc:86:de:b1:e1:d8:2a:07:a6:93:77:de:0e:84:4f:f4:93:
b2:8d:cb:47:1f:56:ac:d0:04:a9:7b:0c:67:e5:6f:a4:81:46:
df:0e:4b:1b:78:6c:0c:03:0e:a0:ab:a9:fd:ac:bd:f2:7e:4d:
04:f1:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:26 2025 by rpki-client