Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa
File: 5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa (raw, json)
Hash identifier: gSRzgRsdorWVoc9QBYIZPBcEHfJU4FjqYrEkGvZ3iOM=
Subject key identifier: 32:6D:5A:25:F9:B5:36:3F:7B:E7:8B:4F:51:26:E3:B5:6B:E4:FD:F1
Certificate issuer: /CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd
Certificate serial: 010D0C9F432858482A8FDFED35225702EF789E80
Authority key identifier: 04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 376
IP address blocks: 192.197.51.0/24 maxlen: 24
205.236.8.0/24 maxlen: 24
205.236.9.0/24 maxlen: 24
205.236.10.0/24 maxlen: 24
205.236.11.0/24 maxlen: 24
205.236.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:df:ed:35:22:57:02:ef:78:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=3b596e1f-c3db-4ce9-9f39-120a28e40429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:ad:7c:f9:f4:3d:41:fe:91:3a:f7:ed:f0:
5b:6b:b1:dd:c3:f3:1c:35:05:57:46:5f:81:be:a7:
e2:9a:b5:1f:fd:4b:e4:e6:bc:b4:0f:3d:31:46:cd:
71:1a:10:3e:11:f5:b0:ec:a1:d7:60:2f:7a:2c:7b:
d2:10:1e:94:b9:5a:98:19:21:4b:ba:6e:c6:bd:8c:
ee:3a:65:49:d1:b6:af:d1:5c:80:0c:fc:7d:ba:62:
c6:24:0a:77:90:7a:6e:86:76:ac:79:9a:92:ea:7d:
d6:bb:8c:93:6c:16:ec:29:98:b3:5f:34:d6:32:27:
42:9a:92:2b:cd:81:c3:4f:cc:fb:f9:b7:45:92:95:
06:7c:ca:62:8b:11:d4:f6:0d:82:ff:b6:ba:9f:b1:
b0:7b:93:0a:f4:f3:61:16:fc:d7:37:f5:f2:ce:bd:
05:fb:ad:2e:9e:68:97:1f:ff:c2:23:8d:dc:78:4b:
88:11:cf:0a:24:6a:71:0f:ae:14:54:cd:64:ae:df:
8a:4b:fb:c8:1d:9c:8c:53:d2:49:b6:89:06:30:a0:
34:67:dd:a4:34:c0:be:bb:fe:4b:62:b1:2a:01:53:
c0:3c:b4:1c:f0:b1:ef:4d:b7:d9:49:a6:47:af:e6:
f7:34:bb:74:cb:7f:96:c0:20:fe:75:58:43:55:0e:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:5A:25:F9:B5:36:3F:7B:E7:8B:4F:51:26:E3:B5:6B:E4:FD:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl
X509v3 Authority Key Identifier:
keyid:04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.51.0/24
205.236.8.0-205.236.12.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:1f:2f:b8:38:d1:4d:b1:01:0f:07:b7:34:fe:7e:0a:63:3b:
22:51:07:f2:6a:71:f7:30:a0:8b:89:de:84:b2:42:80:28:ac:
38:5b:97:9f:55:37:86:07:ac:43:9d:d9:53:79:cd:4e:cd:f5:
8c:d7:90:79:c1:af:45:e6:01:e6:cd:b2:47:40:79:d9:fb:78:
9f:49:3e:69:c0:e7:7a:54:9c:16:82:97:90:2c:1f:17:d1:a2:
6d:83:e8:c4:75:a8:54:c9:31:b1:5c:8b:03:c9:70:d0:45:52:
3a:23:34:9f:17:49:f1:64:8d:4c:60:ab:16:e0:3e:8f:bd:32:
34:9b:67:54:4c:76:b7:30:de:90:6e:26:ab:d8:b5:be:c0:b3:
93:d5:a1:a1:69:00:c9:4d:f1:52:46:42:66:79:8e:aa:3a:da:
3b:c6:86:47:9e:40:b3:5f:e4:b2:87:f5:59:52:b0:b0:57:e2:
6b:db:50:74:1a:ec:f8:9e:11:77:13:f5:f4:32:25:98:1b:bb:
83:67:69:fa:fa:be:4a:6d:95:f2:34:82:40:22:0a:f4:7f:d5:
e0:87:15:09:b6:ae:59:05:40:d3:ad:84:b5:53:f3:6c:4c:05:
35:81:2d:c5:0e:d5:9e:13:50:18:98:68:34:2e:35:bf:61:16:
be:85:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:31:41 2025 by rpki-client