Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/9ca3f638-13cd-3df2-9782-f3c67073a360.roa
File: 9ca3f638-13cd-3df2-9782-f3c67073a360.roa (raw, json)
Hash identifier: XkPs2fDiNOdo3mrjiAsqfOqMGs7H2JsI8faH15geIwQ=
Subject key identifier: 36:6E:7C:8B:07:44:5E:E8:63:54:8B:8F:7C:ED:97:45:A3:4A:48:79
Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial: 010D0C9F43285848239545377B75C70BC14B6CD0
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/9ca3f638-13cd-3df2-9782-f3c67073a360.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 10929
IP address blocks: 192.154.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:45:37:7b:75:c7:0b:c1:4b:6c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=8d5f6ddc-a821-42e1-bcfb-fa87724f8e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:80:3d:f9:6d:10:96:27:55:8e:46:3d:d8:
5a:6e:76:bd:ca:9d:8d:a8:c5:ae:f9:aa:1c:4d:bb:
0f:2f:65:11:3c:22:95:b8:01:97:2a:c0:a8:1a:28:
80:63:c3:85:69:fe:76:e3:8c:de:b1:a8:b7:6a:d8:
12:f7:4b:1c:4e:38:da:d6:9f:b1:1e:04:96:e6:38:
00:c5:93:68:68:59:74:d7:49:2d:f8:21:24:ce:40:
e8:e9:fe:97:94:93:28:03:72:ff:23:0e:7f:b8:f5:
bd:e0:54:32:49:a5:61:8d:a0:d2:e6:6d:07:59:e8:
72:74:f7:fa:f9:cd:30:9a:ee:63:5c:ea:8f:81:43:
ae:95:a8:a1:41:2a:39:ea:f6:86:dc:b6:e5:50:13:
c0:90:4b:02:69:a4:0c:53:dc:8b:c0:4d:47:89:9d:
c3:f6:8e:21:c4:40:b3:1e:f1:83:55:dc:1f:54:e1:
9e:d0:1a:2c:46:ab:5f:4f:5b:28:fe:5d:ab:be:12:
0b:fd:82:5e:54:53:5a:a1:b2:f0:28:3d:b4:21:70:
ca:2d:98:72:4a:e1:f4:3d:72:6b:b6:94:a5:22:a6:
f0:77:e4:71:61:fa:b3:a3:6a:bf:4e:20:55:89:2c:
46:37:66:cd:bf:17:c7:b0:0d:f2:0c:d1:f3:9b:f6:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6E:7C:8B:07:44:5E:E8:63:54:8B:8F:7C:ED:97:45:A3:4A:48:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/9ca3f638-13cd-3df2-9782-f3c67073a360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
X509v3 Authority Key Identifier:
keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:cc:b6:79:5f:8b:9f:d0:36:4c:e5:f2:78:16:ae:90:f5:2b:
c9:27:bc:cb:98:10:c2:fb:78:51:95:1d:31:e4:e8:9f:a7:13:
c9:a2:62:c1:0a:38:f2:77:96:cc:25:cc:a6:5d:35:be:de:16:
5a:28:35:6b:e6:10:46:4d:6a:1d:36:c4:87:d4:17:1a:ab:af:
f7:a3:75:52:69:da:0c:67:9d:8b:20:75:59:ec:8e:d5:4c:90:
bb:d6:67:f2:93:86:9c:85:22:4d:d5:b8:ae:49:55:54:93:3e:
35:77:62:f0:9d:32:6b:bc:37:c4:ab:34:4e:5f:44:41:40:9d:
61:e9:49:f1:49:e2:a0:0c:e2:10:cc:83:8b:8b:49:d9:ff:1c:
28:3d:e9:b8:cd:d0:6e:6a:6b:53:15:35:64:d1:f7:c8:c6:7d:
95:38:2e:ca:12:63:7e:0a:cd:0c:7e:cf:32:2a:51:78:f7:3d:
85:b8:d9:63:1c:fc:9a:27:3e:7e:55:f1:43:a2:55:f2:5d:56:
2f:6b:a1:74:fc:9e:a7:6c:52:9a:70:9b:98:07:99:b5:d6:ee:
01:29:03:d7:8f:c4:57:89:97:ec:3b:98:45:29:60:39:6f:5d:
f5:87:2c:8b:f2:dd:2c:5a:75:e3:c2:46:52:77:cb:f0:21:d9:
2b:c2:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:17 2025 by rpki-client