Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/e59a9a23-9908-339b-a068-56093f0c4f00.roa
File: e59a9a23-9908-339b-a068-56093f0c4f00.roa (raw, json)
Hash identifier: mgLSgQrqQDx/2iK0p9GwCO3A3PFybeAaFW5sEEPIFtA=
Subject key identifier: 5A:2E:71:BF:79:3E:2B:69:87:4C:68:5C:79:E6:02:F4:A7:A6:B9:BD
Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial: 010D0C9F432858485B6B01AF97CAB9667E419D00
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/e59a9a23-9908-339b-a068-56093f0c4f00.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 4476
IP address blocks: 192.68.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:01:af:97:ca:b9:66:7e:41:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=7c81ac2c-73de-4e3f-9ab4-43c95e5053c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:9e:d3:c1:00:5f:1b:10:31:f9:dc:08:51:
4b:37:90:bf:72:cd:9c:c5:41:8c:f8:9b:9e:73:f1:
5f:d2:0a:a0:f9:54:7a:81:b7:4c:19:d0:a0:1f:f1:
e6:ab:8c:56:9f:8a:1e:81:5a:b5:8c:82:a9:31:f0:
9c:ea:bb:da:fc:c5:3f:36:7d:c0:87:5a:78:49:f2:
61:eb:a3:f4:e4:32:51:18:2b:ca:fe:ef:45:ae:95:
ba:1e:bd:70:28:d4:b3:6b:64:52:dd:77:53:55:f5:
63:e2:90:21:d8:49:55:83:db:ca:90:b6:c8:e2:f2:
ad:66:f8:75:6d:07:1f:b1:a4:21:00:d6:2e:c3:6e:
3b:19:76:7c:92:75:4e:5d:bb:cf:2e:fc:80:51:3a:
af:04:42:bb:4a:c7:01:49:b4:43:e5:eb:87:fd:a4:
4d:09:72:fe:97:4b:32:d0:60:ad:73:7c:2e:07:6b:
23:b6:cd:40:80:14:75:62:fc:07:1d:21:e7:b3:4a:
94:ce:97:9b:ea:9b:4b:3a:55:68:cb:e7:8c:8d:cf:
18:2a:80:2b:fa:b0:65:20:9f:20:21:68:7f:a8:5f:
68:ad:32:3b:f0:0e:b1:c9:6f:fa:7d:4f:1c:b6:27:
7b:ba:57:1d:79:55:71:42:dc:5e:a7:7b:6a:ca:76:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:71:BF:79:3E:2B:69:87:4C:68:5C:79:E6:02:F4:A7:A6:B9:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/e59a9a23-9908-339b-a068-56093f0c4f00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
X509v3 Authority Key Identifier:
keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:7f:5a:9e:65:5f:aa:7f:5e:43:a1:52:f6:dd:3f:8b:65:2a:
4b:8b:02:58:f5:b0:e7:5c:3d:f2:7a:d5:82:0a:b5:ca:d5:72:
97:e7:82:7e:98:9d:d9:a6:74:65:8a:a9:36:84:94:97:6a:2e:
46:c2:17:b3:5d:ec:90:63:7d:b3:7f:be:f8:64:7b:ed:7a:e8:
3b:0a:56:95:92:e3:75:c8:ac:24:eb:dd:2d:3f:be:12:37:32:
66:5a:b1:16:d4:e0:06:f9:70:fb:12:70:ab:02:24:41:6f:b3:
a6:d1:0f:b3:53:d1:ae:62:2b:f3:7c:52:fb:e3:6c:d3:42:ab:
f7:6a:4b:e7:95:36:6a:68:9c:1a:5a:3d:31:25:97:12:fd:b0:
55:a6:70:fc:bb:98:93:a5:b8:75:f6:4e:65:d5:68:83:69:ca:
63:ec:23:29:0f:f9:e8:6c:93:c6:c1:01:e4:62:b9:a1:ce:93:
66:f4:a0:4f:bc:df:57:ff:d2:2e:d1:e2:e8:b9:e4:b3:a8:5f:
60:37:51:02:78:9b:8f:be:fe:e6:f0:a0:85:6a:db:bc:20:0f:
05:f7:6f:cb:5b:0a:5a:9d:3b:8a:63:cc:6b:7a:94:d5:7b:37:
91:36:fc:3f:36:b1:43:37:5a:ba:73:5a:bd:b7:35:38:ce:4b:
fd:ec:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:24 2025 by rpki-client