Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa
File: cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa (raw, json)
Hash identifier: NGrquWwXe6lE17bzSN0IQU+2LRNSw2K+4fYSnMLxmEA=
Subject key identifier: B7:FB:D1:63:E8:6E:E0:6A:09:2D:C8:EE:D8:E3:7C:64:89:99:5F:F6
Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
Certificate serial: 010D0C9F432858480BDA724D0C086143CB580B40
Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 40948
IP address blocks: 192.232.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:72:4d:0c:08:61:43:cb:58:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=ae366cfa-f172-4007-91e9-a5ea04d78b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:79:bf:bb:33:19:56:66:fa:40:82:09:a8:
5f:10:9f:3e:99:4c:3b:70:33:44:3f:9d:bc:f7:71:
23:2b:5b:79:66:af:91:ca:a8:b2:c7:e2:38:73:4f:
8d:3e:95:15:b3:d7:92:20:7d:6a:1e:f0:dc:c7:f3:
77:94:41:8b:ce:ba:14:18:f2:b1:70:62:51:7b:75:
bc:91:cf:e5:e0:86:63:0a:4e:5d:43:d7:7b:67:da:
87:3c:7e:e7:98:26:7f:cf:8b:36:89:31:57:48:4c:
6a:9a:c9:e4:f3:a0:b2:d2:7d:a2:3e:1c:b2:23:23:
08:93:97:cc:9e:b7:a8:a6:a9:eb:f3:31:42:a1:68:
22:0e:05:1d:d3:a0:07:04:45:f1:1f:72:2d:12:4c:
5d:35:f8:d9:3e:41:84:05:57:05:ea:41:39:e0:7a:
2b:44:63:f3:4f:76:8e:74:fa:ea:b4:13:00:32:df:
c8:64:5f:3d:4b:24:62:cd:6d:63:a6:0b:47:b2:dd:
82:e6:eb:be:8f:53:e7:03:a4:18:20:9e:fa:22:ca:
2d:a9:f5:fb:96:78:b2:72:0d:b3:02:5d:b6:f5:19:
42:96:d3:3f:03:00:5b:3b:b0:7f:29:5c:2c:ef:65:
40:97:89:20:dc:cc:53:5c:26:39:c4:80:fc:08:37:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FB:D1:63:E8:6E:E0:6A:09:2D:C8:EE:D8:E3:7C:64:89:99:5F:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl
X509v3 Authority Key Identifier:
keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.232.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:ee:12:4f:8b:78:78:a3:19:ee:03:d4:54:05:a0:d1:12:e4:
03:60:81:e5:38:d7:04:6a:d6:aa:ef:42:84:a6:6e:e4:b1:13:
8f:72:52:71:1f:fc:7a:04:10:c0:3d:90:f5:89:c0:d2:5c:5b:
b2:bc:e4:28:c0:0d:c9:ac:0d:cb:54:c0:f1:68:38:49:41:d7:
15:64:7f:56:1f:0a:f1:ca:c6:38:12:73:6a:96:6c:cb:92:f0:
79:68:a2:72:20:44:68:81:6c:61:a2:4f:60:1c:7d:3c:aa:4e:
2b:f2:00:ec:89:ff:33:49:2d:53:7a:18:3c:fb:9a:c6:e6:9a:
4e:4e:c9:dd:ec:dd:fa:f8:59:85:b7:2e:7a:9b:3a:94:08:da:
6c:4c:bb:b2:7b:25:6d:a8:37:2f:29:2a:a8:86:a6:09:39:25:
40:bf:48:f6:85:2e:e5:af:ad:45:9e:ba:a6:b8:f3:20:2e:99:
42:61:07:5f:ab:3e:cc:3e:dc:b7:11:be:bd:9d:2e:7f:15:02:
26:54:06:31:00:7a:b4:96:56:04:5c:74:71:1b:84:e1:e6:0f:
e5:6c:f5:c5:ac:20:74:d2:40:ef:72:a7:86:e2:a0:7c:b9:bd:
0f:06:ea:83:56:a0:84:e7:64:66:2e:ca:b9:f4:d7:b8:d7:31:
fb:77:ba:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:53:03 2025 by rpki-client