Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d57b8855-f9bb-367b-821d-c56c2260256c.roa
File: d57b8855-f9bb-367b-821d-c56c2260256c.roa (raw, json)
Hash identifier: aX+C5eEZ42AiuQ/btQS8tMV8Iyqu7QaWwsapHfky6sU=
Subject key identifier: B3:86:18:D7:EE:1F:8F:79:72:4B:78:3E:EE:05:69:15:10:47:FB:75
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F432858487CEB335C48AD2525EDB6DF00
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d57b8855-f9bb-367b-821d-c56c2260256c.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 54994
IP address blocks: 168.235.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:33:5c:48:ad:25:25:ed:b6:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=aeee6aff-9155-4bcf-b09a-c09d0606bea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:f7:6b:29:40:16:09:41:2b:43:96:de:4c:
df:17:d9:4e:f1:9b:08:b6:b3:c3:2f:5f:45:08:00:
57:13:3a:dc:19:a2:e7:fd:7c:eb:98:7c:30:d5:0e:
8f:79:14:ae:34:e5:62:4c:58:45:49:b8:87:31:09:
7f:41:a3:4b:19:bf:89:0c:d0:83:59:b3:1e:64:5f:
e2:ec:40:ac:4d:b9:5c:e1:83:4c:f2:aa:b6:1a:c8:
a0:75:30:28:2c:e7:22:87:4e:3f:10:99:53:3c:de:
d7:b9:be:a0:03:f1:0f:83:03:8a:60:dc:03:3a:ba:
a2:96:73:a4:4b:22:4d:b0:5b:e4:06:1b:83:9b:ab:
fd:d2:f5:91:44:22:48:ea:ac:20:38:85:b6:a1:a7:
07:89:4f:31:3e:96:ab:c6:09:01:04:39:53:91:a2:
20:21:bb:8a:81:e0:81:8f:ab:31:77:2b:ba:49:79:
2c:dd:18:78:88:a4:67:4a:21:a3:51:16:ce:0c:a6:
74:2f:fc:16:04:92:73:14:ff:0c:ac:73:7c:95:68:
17:62:ce:17:e4:28:e3:f9:bb:6d:8e:76:2f:d3:db:
b8:78:8a:fc:e8:2a:d7:67:dc:3a:17:5e:e3:fe:cd:
3d:33:a0:3c:43:23:1b:e1:5f:29:1b:77:a0:84:15:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:18:D7:EE:1F:8F:79:72:4B:78:3E:EE:05:69:15:10:47:FB:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d57b8855-f9bb-367b-821d-c56c2260256c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
168.235.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:42:20:cc:16:04:56:9b:dc:db:0d:d8:38:6b:b2:c3:7a:05:
76:ed:68:01:a4:a7:2b:59:a8:a6:d4:8a:c0:ad:90:03:0c:bc:
02:8c:72:93:78:b4:3e:23:32:8f:3e:1c:f5:ee:d7:9c:63:3e:
e2:88:dc:86:35:ab:90:10:7f:ef:32:a5:50:f8:cd:3e:cf:84:
1f:38:d6:65:30:38:1e:23:e8:11:43:32:c6:32:cd:d5:92:42:
d5:8d:b0:ed:cf:99:25:53:77:dd:dc:4b:eb:cb:5d:14:96:69:
c9:8a:3b:9b:a7:5b:55:34:05:8e:31:c0:6e:d7:61:e3:60:68:
25:f5:c9:cc:51:52:a3:13:b0:ab:6e:24:50:5b:69:cd:d5:41:
52:5a:fe:9e:6e:ca:25:52:f3:03:33:fd:b1:2a:87:48:43:cd:
5f:5f:50:b4:6c:83:d5:d2:7f:20:79:7a:8c:5d:e1:c3:ee:7a:
fe:1d:fe:0e:da:1c:aa:2a:e9:0e:6b:ef:c6:9c:af:a3:ab:b7:
3e:bf:b5:99:57:91:61:6a:51:68:d1:0f:e0:10:72:69:0c:ba:
42:5f:3f:19:9b:fa:4b:9f:e1:a9:1c:30:8a:44:b8:4b:75:ca:
80:37:f6:a0:e2:7d:c7:15:13:47:7d:af:94:40:f6:37:46:9e:
34:65:3e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:54 2025 by rpki-client