Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa
File: 0639a3ec-6704-3229-98c1-628460a5c2f0.roa (raw, json)
Hash identifier: aXrAqm/uXxXVyq38qgL95tSGaj1FUstWrfCDSmOl+uA=
Subject key identifier: 10:B3:6C:6A:98:D8:4B:DE:4F:44:D5:6E:58:23:8A:F2:A4:12:09:10
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858486C2B2572E1DC47E1CD48D130
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 11404
IP address blocks: 192.175.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:25:72:e1:dc:47:e1:cd:48:d1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=a6d2e6b9-69ff-4a93-92aa-27eece9de983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1f:a3:53:8d:ee:91:2f:5b:30:44:ae:0e:e6:
d3:dc:2b:28:71:ac:f2:c3:83:a8:83:25:50:e9:74:
5c:0d:75:4c:df:5d:41:ba:17:9a:a7:1c:43:63:cf:
0b:6f:2e:ad:bb:54:91:d4:c9:72:18:d6:18:d7:0d:
9f:70:0b:7b:36:ac:1f:2a:40:4d:94:88:c1:e0:cd:
34:5f:44:11:d5:00:67:ac:fc:31:dc:06:b6:4c:a6:
44:29:2d:23:91:5a:b1:6a:e2:19:46:57:b5:be:99:
bc:6e:85:ed:ff:d8:4c:15:cc:7b:65:2d:e6:20:b3:
8f:13:6b:db:59:30:cb:3d:8c:e6:2f:46:b3:29:33:
04:1b:41:0b:a3:19:e3:73:50:57:86:b1:2b:69:ef:
a0:70:c9:9f:0e:2f:8d:e7:f1:2f:59:d2:27:d9:1e:
7d:ac:fe:53:54:10:4a:d4:36:b4:cd:cd:bf:81:64:
a0:01:2b:77:b9:de:80:e6:bb:88:e7:58:d0:af:36:
1e:10:29:d9:bb:44:61:d0:35:c0:3e:a4:79:29:4e:
21:2d:84:46:29:20:23:ff:04:2d:c4:c4:49:83:45:
cb:b9:0e:b2:8d:a7:52:e0:f8:2b:06:c5:d8:19:13:
27:67:08:01:53:27:9e:a7:8d:51:36:02:1d:54:2a:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:6C:6A:98:D8:4B:DE:4F:44:D5:6E:58:23:8A:F2:A4:12:09:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
192.175.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d5:9e:5c:7f:69:00:2a:db:26:3a:4c:20:65:da:81:54:7a:
98:7c:96:58:15:92:58:ec:a7:51:45:95:3f:a2:c4:61:08:e7:
be:fb:55:37:cc:fe:34:0e:3c:0e:13:7c:fe:e8:4c:09:a5:48:
a9:1e:f9:53:bd:a0:b6:8d:97:e1:77:9f:3a:5e:0f:f0:fc:43:
e4:b3:ea:0c:cf:d5:56:eb:09:39:34:1e:01:68:fa:b9:e9:7e:
dd:01:e0:2f:3b:80:13:b9:aa:1a:95:f2:af:9e:03:71:91:d4:
5b:4d:87:95:0c:77:de:87:2d:79:07:30:f0:ae:d8:7e:c1:a1:
85:d8:ba:21:b8:b1:37:d7:63:fc:23:26:cc:da:46:04:e5:33:
9b:88:77:38:0c:4c:6c:b5:23:b2:3f:d7:50:9d:93:1d:3d:3e:
3d:79:40:ae:8d:20:a9:42:91:a6:88:c2:fa:8b:ad:cb:5b:9a:
4d:a1:3e:a7:d1:d5:03:de:ad:91:e9:4a:68:a5:ff:9b:97:d3:
92:ae:25:71:5c:ca:d6:e7:46:07:4c:21:86:41:ce:d3:28:03:
fc:0c:c5:22:7b:c9:85:f1:c1:a3:e4:35:ca:a7:aa:48:85:97:
8c:e2:96:0e:9b:ca:b3:e4:35:0a:b5:2f:3b:8b:c1:ca:0e:71:
5f:7b:ba:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:43:03 2025 by rpki-client