Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa
File: 3d224895-501e-3aed-857c-97ee5700de82.roa (raw, json)
Hash identifier: Ssny2rcQwsx1jUIVXyanpwwfcchS4IkKCK3P5tBFuK8=
Subject key identifier: 93:B6:9F:37:61:50:FB:F1:0A:B9:A1:48:99:59:9F:1D:3D:2E:34:F1
Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial: 010D0C9F4328584863CB0596D645DFE4DEA79AC0
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 30242
IP address blocks: 199.167.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:05:96:d6:45:df:e4:de:a7:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=b8e73e5c-b813-4af7-aa69-fad0cfca5dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:4b:67:ff:85:71:c4:ca:24:42:14:bf:54:
d3:d3:65:da:3e:e8:54:60:8f:c3:b7:0a:6c:d2:da:
71:d4:23:28:23:5d:fc:dc:9e:70:58:f4:e6:28:3a:
ec:e1:5c:50:db:13:1d:66:e2:2f:67:f1:7c:48:9d:
bb:51:05:06:72:15:3b:f0:b7:a9:4f:a6:7c:cf:7d:
d8:5a:1e:38:5f:3b:6b:4c:09:42:91:17:b5:38:77:
1f:ed:f8:c9:a1:90:c4:8c:30:21:ce:04:54:84:f3:
1d:72:63:e5:94:40:0b:16:6e:87:0f:a0:d6:bd:64:
eb:63:4c:0b:00:58:98:17:d8:aa:2a:33:2c:81:36:
05:96:cc:01:a1:40:21:3b:47:46:68:25:c1:cf:99:
7f:4b:9b:25:27:ac:b7:d4:23:85:c9:0c:f2:b8:42:
1c:be:48:9f:60:86:82:4c:71:d1:9f:37:8d:de:c7:
a3:64:84:65:27:ff:58:3c:b2:2a:65:e8:5c:d2:2e:
07:14:7d:12:da:3c:51:1b:89:6d:6a:93:22:27:fb:
8c:49:25:96:4f:27:de:ac:b2:85:29:0b:09:c6:8a:
75:09:c9:23:c9:51:56:bc:27:23:f5:37:d7:e4:c3:
da:22:eb:85:b2:c5:74:95:f4:e3:26:b8:38:5f:49:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B6:9F:37:61:50:FB:F1:0A:B9:A1:48:99:59:9F:1D:3D:2E:34:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
X509v3 Authority Key Identifier:
keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:a0:a2:67:21:ed:b0:6f:77:a3:1f:e7:b8:98:c4:38:21:d2:
51:aa:86:a0:fe:73:0f:da:2a:7a:70:79:b5:36:6c:88:cc:a4:
96:b6:be:f7:3b:7c:06:99:40:37:d3:4f:09:30:6f:f4:ca:20:
92:70:71:7b:40:29:0c:19:98:e2:c7:27:6d:87:b6:8d:e0:d9:
af:5b:d3:ae:a3:0a:85:19:7f:b9:d2:fe:56:28:5e:59:9f:bc:
f8:30:7a:34:bc:14:b1:27:33:e9:f6:89:f3:bd:c6:c6:91:06:
53:ec:4f:ee:06:ce:5e:ef:66:52:4f:fe:43:37:41:b1:8b:19:
78:51:43:05:22:19:ad:d4:26:1b:50:36:03:c9:c7:d8:f1:05:
62:ae:9f:93:b8:bf:79:e9:e7:8e:84:fd:fd:91:c9:01:34:9c:
34:47:5b:b2:79:bb:a8:f5:17:06:af:f6:d1:39:2c:cd:ae:3b:
05:14:af:8c:3d:cd:ac:ed:2d:9d:e1:29:8d:52:d3:46:e0:53:
7c:04:92:b1:08:af:15:a9:80:24:9c:57:0e:97:1c:e4:8e:56:
8b:bc:ca:f7:ce:d0:62:ce:84:68:36:83:08:6f:60:e2:d5:12:
7e:0d:9c:5c:4a:fc:ff:6a:76:c8:09:03:71:c2:e3:d8:14:2c:
19:86:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:14:42 2025 by rpki-client