Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
File: 70a2edab-599b-37b9-90c6-3e15b53af115.roa (raw, json)
Hash identifier: F+DnerLIavtMMX/AY23rRJ4J4E5ahuG2GAj9w0Wjp+Q=
Subject key identifier: C2:BC:AD:43:24:AC:52:5D:82:D1:EC:0D:38:56:1A:7B:7C:48:19:43
Certificate issuer: /CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
Certificate serial: 010D0C9F43285848100A86D10919F41ADB450C80
Authority key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 397701
IP address blocks: 192.64.12.0/24 maxlen: 24
199.193.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:86:d1:09:19:f4:1a:db:45:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=8f8d60ca-99a0-4e09-8057-fe98f5f52f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:2d:ca:d9:f9:20:22:dd:51:b9:ef:ae:d4:
66:5d:cf:68:0d:ee:d0:94:df:be:a3:52:e7:de:16:
fa:b4:ee:68:a8:03:81:d7:ee:a7:75:8a:b3:5b:45:
cb:06:40:19:a1:4f:ea:b0:1e:b6:79:81:96:1f:42:
f8:26:bd:ba:71:df:3c:14:af:a5:32:d8:54:9c:44:
63:ae:59:01:84:bc:0d:27:bd:a6:20:46:76:ed:4d:
63:6b:6a:9c:a2:87:24:f5:8a:c7:21:d1:7b:40:5a:
17:cc:65:95:6b:f0:75:1e:96:8b:8e:8b:38:04:08:
90:08:a2:d7:62:16:98:01:5c:dd:ff:e5:33:98:6c:
0e:d1:29:a6:fe:8e:2b:57:3b:0f:dd:ba:55:b3:bc:
e0:be:6f:1b:9c:07:93:67:48:c7:17:53:e5:bf:b6:
1e:d6:8e:c5:76:28:f0:af:3a:63:5e:41:a5:af:54:
e0:5c:58:50:37:3a:14:d5:42:64:06:4f:f6:cd:87:
e2:3a:9d:c1:02:24:7f:d0:c9:64:fa:00:03:0f:45:
65:78:2b:4f:c8:71:84:3d:a5:4e:d6:0c:a3:ad:85:
3e:69:35:6a:7e:90:cf:17:62:50:2e:aa:db:06:c5:
7b:20:1f:ba:ac:52:bb:33:ae:45:8b:94:c5:6c:bc:
cd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:AD:43:24:AC:52:5D:82:D1:EC:0D:38:56:1A:7B:7C:48:19:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl
X509v3 Authority Key Identifier:
keyid:37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.12.0/24
199.193.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:40:aa:66:90:d4:31:7c:8b:2d:48:44:fb:b6:9a:75:16:a3:
24:54:a4:f4:d5:97:12:3b:be:e6:03:44:e2:65:00:e1:ac:aa:
85:f7:1c:63:02:fa:00:75:d9:03:5d:50:e0:af:13:ac:1b:5d:
03:33:cc:0a:0f:45:46:da:67:93:48:13:c6:21:44:20:f4:25:
3a:d4:69:79:f5:4e:7a:02:f8:98:c5:20:e2:f5:27:57:9a:46:
05:92:14:69:23:ff:a7:97:13:d4:ff:d9:db:71:91:9f:50:88:
99:dd:8d:34:86:b7:63:0c:3f:fb:f0:ab:58:aa:91:41:81:fe:
bf:18:ff:4a:35:3b:33:df:c3:d7:78:2c:88:95:ff:69:e1:83:
d5:30:62:19:bd:20:3d:4c:13:fd:79:11:ec:63:0c:23:40:d8:
2e:da:54:fa:7a:36:8f:5e:74:54:87:3d:31:38:70:54:2e:f6:
61:0e:75:eb:8d:e1:08:22:f1:b8:37:d1:e5:9b:24:80:f8:da:
19:75:d6:c4:ad:27:23:0e:4a:f5:ba:1d:17:62:27:54:40:bb:
6b:99:d8:12:d7:72:09:13:61:e0:43:e6:69:75:86:46:84:49:
2b:06:db:34:f1:41:3b:f2:7c:7c:15:8d:e5:2a:c7:ab:7d:22:
71:fe:29:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:27 2025 by rpki-client