Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
File: 817df46c-74b9-3aae-93ab-75637ef18bee.roa (raw, json)
Hash identifier: YwLC9Nrz2kyoqIorPXY/iyVXg+q3rPtaJFoJAZkjvlw=
Subject key identifier: F3:98:85:16:16:06:54:21:4D:A6:E2:CA:C3:92:C2:23:65:71:FD:12
Certificate issuer: /CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
Certificate serial: 010D0C9F43285848854B4F3D2EF0D0B014969D80
Authority key identifier: 02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 11068
IP address blocks: 192.200.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:4f:3d:2e:f0:d0:b0:14:96:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=c9d9bf42-7ad2-4fdf-bb85-3404c6d41016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:22:1a:49:b8:d3:f0:68:fd:e5:09:af:ca:fa:
2c:2c:94:3f:68:07:50:67:51:4e:4e:b5:35:29:22:
89:b5:c2:ec:5e:5d:c5:9f:25:92:d3:43:31:79:dc:
56:b7:49:59:2e:78:69:ab:1f:4a:e2:43:f9:22:c3:
67:bb:24:08:ed:11:e8:cb:c5:91:78:f7:06:3b:6a:
6f:06:87:fc:6d:79:52:ea:24:27:92:87:ba:c4:b4:
a2:c0:68:90:40:e2:2f:e0:e2:c3:4b:b1:19:73:63:
b3:47:6b:7e:58:fd:c5:1f:57:6d:44:6b:6c:a0:ec:
90:34:5a:cc:c1:37:21:c1:c4:00:9b:3a:cc:46:c9:
96:b5:39:db:ad:f0:6b:0c:c2:86:27:07:92:4b:d8:
5b:11:0c:b3:6b:9f:05:52:94:eb:ca:37:6b:72:77:
cf:79:53:ff:e8:3c:ba:79:79:0c:1d:bc:97:12:5c:
44:f6:3b:c5:b1:a7:6c:16:83:3f:52:a3:0d:1d:b8:
60:41:3b:9b:ef:e8:74:aa:a5:85:0e:92:f7:92:38:
90:15:c8:ac:d9:71:6a:af:8f:f0:78:10:ea:cf:d0:
2f:d2:b1:fe:72:5a:39:81:84:07:4e:cd:69:a1:ad:
bd:d7:cd:6c:6e:f3:6e:11:04:00:68:8c:ba:71:51:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:98:85:16:16:06:54:21:4D:A6:E2:CA:C3:92:C2:23:65:71:FD:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl
X509v3 Authority Key Identifier:
keyid:02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.200.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:5c:8c:a0:29:a1:3e:2b:b6:3c:66:78:59:c3:d9:76:fd:e8:
a9:98:be:9d:63:fb:c6:e7:80:7d:24:ae:63:37:15:5f:bb:32:
7c:98:f7:2d:e4:7e:cb:d6:0f:95:e1:da:e5:91:99:41:19:f7:
6e:7b:5f:f8:f4:87:73:a8:ac:70:e0:9e:57:b5:f8:9f:f0:f2:
8a:ae:38:93:a1:57:af:3d:9e:ee:be:36:a7:8c:e8:70:91:4b:
b4:09:93:43:07:85:8e:0f:11:61:30:18:41:9f:38:e1:fb:6c:
b6:39:c4:3b:37:34:b1:c0:7c:d1:f6:76:bd:e2:b6:4f:f1:cd:
66:a7:52:ae:52:00:37:02:2f:9f:e5:04:63:b9:47:89:44:0a:
f5:28:f5:c5:01:58:b5:6f:75:58:82:da:ac:ba:8c:31:ff:6e:
00:ae:66:4f:df:ce:ad:f5:9c:22:9f:fb:30:ed:88:81:59:fe:
2a:d4:64:70:a1:08:c8:b7:79:04:28:4c:7e:06:80:ad:2e:59:
a6:6a:4f:f0:0b:31:2a:da:2e:25:69:2e:66:81:bd:46:55:5f:
bc:0f:23:2e:ff:10:26:e0:02:a1:89:f3:8b:aa:14:d2:51:4b:
97:7a:ce:5f:23:4a:d1:36:55:cb:c0:75:78:30:d9:b2:88:6e:
c5:bf:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:32:02 2025 by rpki-client