Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa
File: 52b1de85-0442-360b-b96d-bfcab54c4eac.roa (raw, json)
Hash identifier: ifARcZ/yGREy+sICRsUDgJu+0yGKFvzuJkLQeAcuHlk=
Subject key identifier: 52:5C:F3:FF:F0:34:21:44:86:4D:A1:B0:57:FF:03:6A:CC:66:27:AF
Certificate issuer: /CN=2b52814e-343c-46a0-bf89-2e9064856503
Certificate serial: 010D0C9F43285848222FCF445A397F57F2A25900
Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 393410
IP address blocks: 192.30.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:cf:44:5a:39:7f:57:f2:a2:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=a94feeff-11f1-4c64-afab-bb6438d9900f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:69:7c:8f:e0:0a:41:fb:de:4d:af:d0:ad:0e:
f4:8b:f1:60:1b:2d:bc:28:52:3a:62:7b:19:6e:a2:
99:d1:1c:66:9a:2d:d7:6f:a6:7b:9b:e2:43:77:28:
e0:1d:27:7b:fa:f7:3d:da:0e:e8:f3:ed:a7:57:67:
da:6d:cc:4d:69:8b:ad:6c:3d:c2:fd:ff:30:a7:04:
81:c1:cb:98:68:35:60:1d:bc:c8:12:67:42:f5:66:
ad:47:82:c1:b6:d9:29:86:d6:83:e0:8d:29:a4:bf:
49:a7:ae:45:ba:af:80:f6:0e:c4:49:d1:54:d6:ac:
97:ce:41:bf:ab:a1:06:21:37:fe:71:e1:8f:20:f8:
5b:be:71:a0:31:d3:3a:68:0f:60:6d:f1:32:af:60:
77:24:bf:5e:9e:14:8a:bc:40:bf:08:cb:ca:b6:eb:
49:f6:b2:2d:55:87:43:c3:82:be:31:47:89:cd:eb:
b2:f3:ce:9c:5b:e2:89:0c:0a:bb:4f:5d:51:a1:11:
dd:9e:21:dd:6a:16:3a:23:e7:38:51:e7:5f:2f:05:
e3:b1:1f:13:e8:22:9c:97:c1:9b:16:b4:a4:29:f4:
c3:ec:d3:ef:45:55:b7:fa:f7:9f:d1:90:46:e2:48:
d7:54:6a:29:da:ae:f5:6a:4c:9b:f9:be:c9:71:6a:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5C:F3:FF:F0:34:21:44:86:4D:A1:B0:57:FF:03:6A:CC:66:27:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl
X509v3 Authority Key Identifier:
keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:f4:9c:37:a8:9d:ec:4f:3b:bc:21:fe:44:11:5c:f8:d1:15:
27:9d:ea:10:d3:15:d0:97:b8:8a:51:78:0e:fb:c9:0f:ba:31:
7d:18:d1:e2:f8:33:fb:9a:f4:17:82:0d:a2:57:b0:75:a8:35:
17:48:fa:58:4f:6d:8c:5d:ef:be:08:c3:be:57:ca:68:8b:c7:
d8:b8:da:af:bf:66:19:4d:b7:95:6d:51:8e:9e:91:89:f4:e4:
d3:9c:a5:f5:5d:92:24:e7:5d:03:90:c1:7c:cb:56:f3:9e:db:
36:a7:7e:28:cf:73:3f:bb:27:8d:4f:0a:9f:20:d8:41:d1:e6:
43:10:2d:6f:47:62:73:1d:ee:fa:49:f9:cf:1a:74:92:9d:ba:
08:c4:c4:82:b8:41:da:75:d1:b8:58:ab:86:7b:96:f4:45:cf:
63:68:d2:6a:16:13:11:74:b1:f2:76:cc:c6:d7:cc:61:e9:34:
f6:b2:5b:c8:87:7f:aa:ea:41:01:9a:c1:57:70:22:79:43:04:
de:a6:3e:5d:18:e6:7c:ce:f2:17:0d:6d:e6:22:12:2c:37:c7:
22:a6:38:64:aa:f0:a7:7c:d9:48:d0:c8:32:89:29:05:f2:72:
f9:47:70:20:22:e4:9e:ba:ae:4e:44:df:a8:be:63:25:c6:c4:
44:e1:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:12:28 2025 by rpki-client