Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/c983cc60-905c-3da5-9db4-c626bb313add.roa
File: c983cc60-905c-3da5-9db4-c626bb313add.roa (raw, json)
Hash identifier: FqskLxDel7AYZCQCIsWsqE4HNYDswQA24+oQsAwHW1s=
Subject key identifier: 35:BC:4C:36:BC:E2:9F:5B:36:1F:A3:3E:B1:C6:7A:E9:58:FD:CC:3B
Certificate issuer: /CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Certificate serial: 010D0C9F4328584863CB011178A6CFE68D056B80
Authority key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/c983cc60-905c-3da5-9db4-c626bb313add.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 394298
IP address blocks: 192.234.88.0/24 maxlen: 24
203.89.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:01:11:78:a6:cf:e6:8d:05:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=0ae7455d-8051-4c67-8d50-1369985af816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:bc:16:b1:0d:bd:a2:a7:00:b0:68:74:50:
ba:7f:57:d4:56:03:21:16:bc:a0:d7:c0:7e:92:51:
d9:62:4e:ae:50:8c:bc:91:ba:7d:0a:31:15:91:04:
69:fd:93:60:e5:c3:71:af:4b:9e:47:13:c1:b3:f2:
56:2c:6f:8f:b5:7a:ab:3e:1d:cb:4d:73:0c:92:e8:
57:fc:60:52:76:e3:97:5c:68:6d:3f:fb:df:2c:43:
f2:42:db:27:0c:d2:5e:8d:94:b4:1f:89:8f:3c:f1:
e4:a9:26:c4:cf:55:a6:25:57:64:97:a2:ea:9e:ad:
af:b3:ef:29:40:c7:c8:e1:75:51:17:9d:87:17:54:
66:68:8c:7f:4c:69:4d:3b:62:e9:c6:fe:10:6f:92:
f4:3c:86:74:ca:da:76:fb:69:a1:69:d4:06:ae:58:
80:3f:d0:b3:88:38:78:d6:b9:b2:51:56:e7:1c:98:
fd:c8:ec:e1:2f:de:e4:ad:aa:90:e7:2c:b0:23:ce:
4c:fe:bb:2a:cd:8b:9b:63:3c:6c:c5:73:21:b1:b7:
71:ac:fc:10:77:17:26:e4:dc:10:0f:72:60:84:ae:
34:62:8f:c0:2e:de:c8:9e:21:ca:ec:5d:3e:07:e2:
80:10:72:23:5b:84:56:69:f8:26:60:20:8a:47:7a:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BC:4C:36:BC:E2:9F:5B:36:1F:A3:3E:B1:C6:7A:E9:58:FD:CC:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/c983cc60-905c-3da5-9db4-c626bb313add.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl
X509v3 Authority Key Identifier:
keyid:1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
sbgp-ipAddrBlock: critical
IPv4:
192.234.88.0/24
203.89.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:fa:6f:42:21:14:89:c7:4c:06:dd:8f:0b:5e:b7:4d:c4:dc:
9d:87:22:3e:c1:aa:58:2c:01:d4:d7:b9:38:c4:80:93:36:69:
10:eb:76:2d:f3:99:64:96:dd:78:79:aa:29:22:9e:2a:06:db:
b3:fb:0f:74:ab:35:f6:e1:14:d3:68:eb:bc:d5:6d:37:35:34:
3c:85:75:4a:57:48:67:a5:d8:b7:be:36:e8:0c:cb:70:5f:4f:
f9:ff:97:52:96:66:35:85:96:3f:27:a0:89:b6:26:69:12:90:
b7:7f:26:e9:13:f5:60:bb:8e:8d:7b:d6:c7:0d:c9:48:78:fa:
a1:ff:a8:d9:ab:7f:75:c6:95:67:27:d4:d9:b6:44:3e:ba:a2:
37:2d:44:87:57:ac:80:2a:94:06:bd:a2:cf:ca:c6:8b:60:cb:
d9:f0:8b:01:a5:83:61:7b:db:4d:07:5a:d6:16:fb:90:31:09:
2d:6a:3a:1e:e9:48:64:30:ce:9a:8b:d6:ee:d1:da:d1:e0:2e:
61:07:71:fb:bb:21:69:99:a4:de:d0:94:62:d4:d8:57:d2:26:
77:f1:9d:de:e2:33:ee:ac:45:03:b3:7f:79:01:70:8f:56:06:
a6:0f:9e:12:95:03:d7:75:69:34:ce:f6:33:42:c3:44:69:ee:
60:cd:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:36:17 2025 by rpki-client