Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/424b1e54-2d09-3644-a069-61f76e443c39.roa
File: 424b1e54-2d09-3644-a069-61f76e443c39.roa (raw, json)
Hash identifier: H9brD4Z8QhjAGnl3OB3wrTyHlw4J+RtZ85QVGE7EMZk=
Subject key identifier: 9E:9E:BD:1C:3D:7E:4A:D8:F2:4E:79:82:CE:8E:A9:92:DD:DC:98:C8
Certificate issuer: /CN=1d251b68-9cb8-49ab-91e3-66420fc719b5
Certificate serial: 010D0C9F43285848100A876EBF3723DB08416140
Authority key identifier: 90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/424b1e54-2d09-3644-a069-61f76e443c39.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 16509
IP address blocks: 192.146.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:87:6e:bf:37:23:db:08:41:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d251b68-9cb8-49ab-91e3-66420fc719b5
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=d9c06c1e-7857-4132-956c-5406e74a7a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:f8:81:cf:db:c1:7c:38:6e:6e:42:20:27:
49:9c:86:91:fa:29:69:3b:1b:42:19:8b:d7:10:80:
6e:ec:cb:d2:55:e8:d3:5d:f3:2b:a2:b9:81:7c:de:
22:73:93:34:41:4a:1d:cf:a1:6a:a3:b8:d4:6d:05:
4f:64:b3:5a:a0:68:fa:0d:fa:c0:aa:94:fa:48:e7:
5e:b6:d1:27:df:bc:0f:e9:d2:57:4d:3c:4e:ff:7c:
0a:84:e9:d8:b3:b4:2d:6c:96:05:0c:5b:4c:8d:bb:
e6:ae:c0:14:85:c5:d5:9d:52:c9:c7:0b:8e:ba:68:
f9:cb:cc:fb:4f:a4:a4:9b:ec:51:69:69:b3:fa:42:
0d:1e:95:65:3c:60:e1:75:65:a8:14:22:31:41:a2:
8f:d8:cc:bd:12:d8:4c:4c:ff:04:41:45:4f:75:d8:
e4:a4:53:2f:7b:50:09:5b:f0:87:b3:b5:7c:2c:f8:
7f:d6:cf:3b:46:4d:a9:4b:98:d0:75:e2:91:28:89:
57:8b:34:50:e2:87:00:52:56:75:4b:9c:b2:e9:cb:
5a:77:96:01:ad:7f:f9:70:da:46:98:b1:35:9e:aa:
7e:d4:61:a3:08:69:44:77:74:4a:38:68:32:70:3a:
d1:e4:e2:b9:04:5e:50:be:24:74:b4:66:e2:41:bc:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9E:BD:1C:3D:7E:4A:D8:F2:4E:79:82:CE:8E:A9:92:DD:DC:98:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/424b1e54-2d09-3644-a069-61f76e443c39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.crl
X509v3 Authority Key Identifier:
keyid:90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.146.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:e0:83:16:a4:7e:02:6e:e7:33:3d:7d:19:ac:61:98:1d:5f:
00:ec:34:f6:16:55:75:70:7f:1a:4d:d5:9b:1c:2c:5b:c5:2c:
d8:d0:7c:35:77:6e:5d:33:4f:e5:ee:6e:65:02:76:35:86:29:
f8:40:1b:78:3a:19:5a:25:d9:b5:1f:64:d3:04:19:bf:89:05:
31:92:9f:5e:62:f1:ac:6e:66:64:5a:da:a9:69:33:51:76:9a:
db:03:48:54:01:c9:47:ed:da:0b:93:93:eb:13:fe:f2:bd:75:
30:d1:a7:73:46:69:49:e8:3c:10:88:95:1d:c0:a8:53:e1:88:
25:97:bc:21:a3:2b:57:d0:59:b3:04:bc:93:73:a6:a0:41:28:
1c:3e:5a:11:63:e8:da:06:a1:29:a3:f4:49:a3:ff:fb:dd:4d:
02:d5:90:2e:58:f9:ac:89:76:9c:3c:40:d6:3f:e4:14:c6:52:
47:47:5f:d7:1c:90:67:df:2f:27:3e:ea:ff:bf:9b:80:a2:df:
08:9d:61:5f:4f:07:45:de:6e:76:e2:fd:e0:00:2a:55:20:ce:
89:ef:6e:47:96:df:cb:bb:08:e0:45:81:7f:af:6d:10:cd:84:
20:db:d4:bf:6b:af:9b:07:fd:d8:c1:e0:bf:e8:9f:62:9f:e8:
81:54:0a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:21:52 2025 by rpki-client