Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa
File: c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa (raw, json)
Hash identifier: fBsGEoXKPu+RYOmJUHkP2C7HfeAtGT6kWMxTTYC3eUU=
Subject key identifier: BC:5C:13:55:8C:95:B6:0C:B1:75:68:EC:75:10:F1:08:4A:92:28:20
Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial: 010D0C9F43285848090FAE48AA25AB9181C48C40
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 2906
IP address blocks: 192.173.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:ae:48:aa:25:ab:91:81:c4:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=241696f2-64dc-4fea-8a41-4847dfe4cf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:5a:ce:36:66:99:ed:dc:ec:33:cb:a4:98:
81:ab:97:8d:c8:22:17:58:45:ec:d0:d1:0a:2f:29:
73:6d:17:14:0f:2a:a8:a7:fd:15:12:91:a5:e6:a4:
5e:f1:0e:b9:2b:7d:e2:d1:c1:43:b8:4a:ae:d1:1b:
35:00:aa:1a:b6:f0:97:bf:20:4d:02:64:ea:60:13:
99:f5:62:62:8e:18:d3:ac:86:4f:12:7e:02:53:8f:
60:4b:88:b5:44:1e:35:b5:2b:76:e5:41:9b:bd:64:
87:f5:01:e5:bf:63:c3:f2:30:71:ca:66:40:79:37:
a9:e6:e7:ce:cf:1a:af:b1:58:7f:32:8f:90:33:2b:
e0:ae:d3:b6:93:b2:c8:d2:70:a5:b5:7c:10:55:9e:
15:70:91:0e:f1:69:d5:45:63:d2:34:3f:be:8f:bf:
2d:b7:12:89:4d:76:e7:0f:9c:e1:46:70:6c:0f:5b:
f3:42:f3:0f:69:d9:55:8f:70:5c:9a:47:5d:93:49:
cc:1f:4d:54:bb:4d:75:1b:fa:c0:9e:bb:22:d8:e1:
d2:23:26:81:be:6a:1b:1d:b4:5e:55:11:c9:03:fa:
c2:17:54:80:9c:e7:d9:0d:cb:22:99:ef:d4:0b:c0:
fa:bf:c6:53:e0:55:3d:a9:70:40:74:b1:97:e3:fc:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:13:55:8C:95:B6:0C:B1:75:68:EC:75:10:F1:08:4A:92:28:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
X509v3 Authority Key Identifier:
keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.173.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:93:1f:0a:2b:20:be:99:f7:29:1a:08:cd:86:d1:2d:c3:a9:
24:ad:ff:a3:87:42:de:11:66:b4:52:da:95:0e:86:f1:3a:84:
1b:a7:da:5e:18:37:1d:52:55:f1:72:21:04:f8:99:ba:dd:08:
82:e0:6f:e1:76:35:57:26:fb:98:43:03:36:7b:94:69:2e:71:
62:21:4f:53:c2:99:7b:76:dd:fe:c6:2c:d1:34:f9:68:2b:8c:
a8:c1:98:cf:af:ff:eb:f7:ee:5a:ac:f8:bf:e8:ac:6a:f7:79:
c3:05:cc:43:7d:5a:c6:a8:e3:5d:12:f3:91:82:60:28:5e:8a:
8c:49:2c:cb:9e:d7:15:6e:a9:03:d8:ef:48:58:2e:ee:93:1b:
62:60:73:63:fb:c6:e4:ca:9e:61:2a:4a:4d:ad:a0:f3:fe:2b:
89:9c:65:ac:cf:7a:cd:24:bf:2e:98:44:3a:6d:fc:8c:ce:ba:
40:03:23:e3:fc:bb:2d:e1:35:0e:a2:b2:02:5e:17:f5:d8:8f:
7e:ce:b4:fa:13:03:df:bc:04:c9:0c:c8:e9:2e:9d:5d:4e:1f:
28:58:4e:ed:ee:4f:99:ce:33:0b:ca:93:7f:55:75:65:16:71:
a9:a4:48:37:c3:8c:21:cd:f2:fa:6d:f1:4e:2f:ce:24:f8:42:
ba:4b:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:36 2025 by rpki-client