Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa
File: 8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa (raw, json)
Hash identifier: e8mEBc083MlldDhzmPTpeVhEZZMWULrLsTSLhWHVHKg=
Subject key identifier: FB:01:DB:A3:1B:BA:E9:E4:FC:D0:BB:04:28:5B:CF:21:00:17:85:26
Certificate issuer: /CN=c42e23f5-032b-4670-8e05-b4b0477e4388
Certificate serial: 010D0C9F4328584869606CF8F4C52A45C317E140
Authority key identifier: 2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 13692
IP address blocks: 192.133.23.0/24 maxlen: 24
199.195.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6c:f8:f4:c5:2a:45:c3:17:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42e23f5-032b-4670-8e05-b4b0477e4388
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=a0dc2998-3f14-4a74-ad51-ba8623b9e6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:5c:63:99:ec:2d:45:57:1d:46:ca:bd:65:
b1:b0:8b:e8:33:cd:87:08:0f:92:c7:36:16:11:40:
a4:34:31:71:74:60:b6:a7:77:bb:80:49:b2:a6:46:
7b:4a:81:17:c1:91:d4:ac:57:65:29:e9:f0:77:08:
d7:81:25:72:f4:8a:b5:53:14:4c:43:b9:fe:e8:6e:
d7:5b:e3:47:c9:c6:13:0d:e8:04:fe:f7:8a:0d:e9:
f9:12:de:fc:fc:17:53:f4:d6:a0:86:94:4a:ce:d0:
ee:52:ca:c1:cd:b3:62:27:9a:1e:9c:df:f4:94:46:
92:bd:0f:81:f1:05:91:23:df:bb:b4:18:d6:c0:6f:
f5:73:73:d3:7b:19:75:55:1c:fa:73:90:6c:04:27:
a7:a4:83:0e:c8:46:9e:5f:24:83:3a:f8:52:f2:fd:
51:69:db:12:ab:f6:4c:da:58:66:43:46:cd:1a:ac:
c2:27:41:0c:76:b7:36:9d:39:6c:ce:fd:74:b3:9e:
2c:8c:9f:f9:51:84:29:42:2a:0a:f8:ca:38:7a:26:
e6:d4:3e:4c:35:9f:ef:15:93:16:29:25:87:3d:07:
ec:98:8e:0b:fe:af:16:20:d2:cf:fd:d2:a4:33:86:
8d:a2:b8:f7:40:c1:b2:1f:08:03:65:93:6f:9e:91:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:01:DB:A3:1B:BA:E9:E4:FC:D0:BB:04:28:5B:CF:21:00:17:85:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl
X509v3 Authority Key Identifier:
keyid:2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer
sbgp-ipAddrBlock: critical
IPv4:
192.133.23.0/24
199.195.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:bc:c2:c0:17:54:bc:22:2c:57:a3:bc:a3:b8:65:07:ce:93:
55:59:00:54:21:26:59:7c:1a:47:06:96:3b:bf:46:b1:af:d5:
df:f4:b0:86:bf:7e:cf:3c:3a:58:c0:50:ab:b3:49:9c:6b:93:
40:7a:52:fb:b0:3c:90:60:6c:d0:bb:86:cb:c7:90:7a:78:03:
a5:31:0d:93:18:68:aa:21:cf:9e:20:e7:9b:ff:c7:43:a4:1b:
cf:46:38:ae:25:1c:80:8b:76:4d:f7:79:39:40:48:0d:14:69:
3f:10:5f:d0:41:4b:4d:4a:29:48:56:f7:a2:e9:dd:40:b1:b4:
80:58:91:a8:0b:b3:1d:27:89:bc:ec:72:65:78:d6:f2:71:93:
85:7d:3e:b8:c9:96:75:2f:ef:33:d5:52:2d:af:fb:87:cb:46:
15:24:57:10:cd:e3:36:e0:71:0e:35:b3:17:15:3e:00:49:a3:
b9:ac:54:b0:ce:97:30:80:8d:55:d9:9c:2c:bd:51:8e:a6:62:
df:16:c7:3e:5d:3f:c1:cd:9d:f6:41:58:03:6c:bf:e8:56:3f:
d0:77:91:1a:ec:5d:ca:89:b3:4a:1e:d5:03:16:0a:c1:8d:35:
d7:c4:47:e3:53:9a:63:51:0b:56:c2:af:7b:45:59:09:50:4c:
40:3a:27:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:42 2025 by rpki-client