Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
File: 3758c344-8618-3225-b26f-acd90e5ffeae.roa (raw, json)
Hash identifier: TsIsXe875w0qeLdDpDyVYj1cacwMQwNfyjOEnJNL0Lw=
Subject key identifier: 33:26:66:91:85:85:3D:CD:B0:B0:CE:4D:51:64:D2:3D:F9:ED:FF:09
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328584851A56AAF312BC4D89B288800
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 14618
IP address blocks: 192.175.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:6a:af:31:2b:c4:d8:9b:28:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=fa125a44-e093-4651-9e54-f646b1bb23d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:26:9a:d8:c4:b2:31:f8:35:35:46:6d:32:
83:14:fd:a7:58:f4:f8:60:20:9d:d0:86:b3:d3:f3:
55:22:1a:99:da:33:27:d2:e0:58:99:9c:1b:fc:8d:
fd:a6:f5:a4:87:b5:5b:bd:11:e7:e0:e8:9a:f3:dc:
55:d9:61:85:de:2b:ff:98:95:6b:c4:09:13:0f:f6:
a5:c0:88:ce:8b:d6:eb:a0:65:25:ea:bf:e2:85:ea:
fd:e4:12:b5:86:40:d1:49:1a:2d:07:b9:a1:eb:12:
7d:c3:34:18:e2:29:ca:33:cf:6d:3f:67:21:44:37:
dd:1e:b0:8c:d2:0b:03:38:d2:b6:99:2e:f8:96:61:
59:03:79:f0:f7:c0:cd:75:64:fe:4f:13:b7:94:b3:
6e:27:34:d5:8b:a7:38:fc:02:04:4f:5d:8f:80:87:
9d:2a:e2:2f:1b:e5:1c:93:17:d4:db:3d:5f:12:99:
8c:92:7b:ba:14:8a:49:d1:ad:5f:2b:08:83:02:38:
ce:35:dd:23:13:43:c1:bc:ac:1e:62:4d:b9:cc:e0:
71:35:b1:e6:d7:aa:09:cd:e2:0a:2a:a1:9c:46:5e:
90:62:31:9d:24:4d:e6:8e:70:27:6c:53:19:4e:4e:
8a:33:b6:49:f4:9d:de:55:71:2d:6f:d4:a3:b8:dd:
94:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:26:66:91:85:85:3D:CD:B0:B0:CE:4D:51:64:D2:3D:F9:ED:FF:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
192.175.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:e2:bf:ca:ab:5b:53:dd:4f:03:5b:4f:db:31:7e:6a:74:11:
fd:a2:af:69:6b:a6:bc:03:9b:76:af:68:e0:ed:df:79:dc:f7:
4b:d4:bc:ac:e1:3d:1d:9e:96:45:2b:f0:ff:3e:f3:c9:b8:73:
bd:d9:52:ea:bb:96:30:4e:25:51:b7:9e:cf:90:f4:0c:8f:04:
78:6b:e9:d5:2f:ee:f9:45:8c:f7:98:4d:a6:0e:70:b3:57:8f:
f5:f2:34:9f:eb:62:d1:74:ed:14:f1:27:19:bc:89:c3:e5:61:
bb:74:8a:d3:9a:e5:1a:a5:7f:55:47:20:20:cb:9b:9d:e5:6b:
0e:b4:d0:f6:49:bb:92:90:c8:6f:32:f3:0b:89:49:e1:7c:ce:
b9:1b:33:ba:7c:55:05:04:fd:6e:30:9e:ea:4c:fe:d0:4f:c0:
ee:a8:67:1d:c3:b7:05:75:4c:25:a8:9a:7d:bf:7f:d1:9b:76:
3d:03:1e:6b:b8:87:c7:1b:69:3c:d2:f8:c2:3f:85:f2:e9:da:
f2:21:bc:3a:77:1c:8f:0e:0d:f2:67:b0:8d:6e:33:4b:cc:92:
77:d7:aa:26:7b:23:1c:d5:de:5e:7d:5c:be:fd:9d:a4:a4:55:
ea:08:bb:e3:e9:b0:0d:e3:e7:be:32:c2:f0:fc:4e:32:d3:80:
77:f8:3b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:41 2025 by rpki-client