Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
File: 12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa (raw, json)
Hash identifier: lU2DxCq791Q4CNka/m2HBbZ8SL21oZHVIvc+opt59Ls=
Subject key identifier: D3:0A:D8:69:90:58:22:06:1F:12:BF:A4:62:36:A5:5C:2B:18:C8:65
Certificate issuer: /CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Certificate serial: 010D0C9F43285848748B172C30DE7B21D73F7260
Authority key identifier: 51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 7018
IP address blocks: 199.83.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:17:2c:30:de:7b:21:d7:3f:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=1da6208e-a94b-4bd1-822a-6851da5f4ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:47:d8:5b:6a:e3:5d:4b:10:01:c6:24:06:
38:e4:59:8b:71:80:dc:90:d0:6c:85:5e:95:e0:b7:
46:9d:2b:b5:47:49:8a:c2:ae:e7:7e:bf:f0:ea:79:
5e:c6:fa:a4:63:da:e4:53:3b:00:6b:79:cd:6e:49:
13:8a:5e:30:89:de:ff:e7:ad:3f:fb:aa:09:79:c1:
f4:5f:8a:c8:68:19:df:ff:47:2a:ef:6a:47:21:e9:
c5:13:dc:b9:2d:a2:41:29:d5:c5:74:db:4e:92:83:
1d:2f:75:1f:d3:8d:9c:5d:96:83:ff:1c:8b:35:dd:
18:e8:18:07:83:13:09:58:1f:fd:9c:97:4f:3d:aa:
f6:8d:d8:33:0d:6f:26:3f:8d:95:1b:36:a4:95:84:
ba:7b:ac:ab:62:97:c4:06:98:95:24:6c:ec:1d:84:
db:57:38:28:b9:86:b9:6f:73:0b:2f:91:94:c6:96:
f3:c1:66:39:b2:2e:d8:52:32:00:c9:cd:b9:58:89:
20:4d:fe:aa:bf:3a:2a:60:8a:e5:48:38:a7:f7:53:
f1:b4:b8:e3:52:4c:5e:28:28:d4:99:93:6a:ff:f8:
93:16:d4:83:4c:28:cb:eb:f1:6c:42:3c:cd:b6:4d:
d5:c2:c0:f8:db:32:a4:3e:cf:32:db:00:fa:30:44:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:D8:69:90:58:22:06:1F:12:BF:A4:62:36:A5:5C:2B:18:C8:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl
X509v3 Authority Key Identifier:
keyid:51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
sbgp-ipAddrBlock: critical
IPv4:
199.83.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ab:ea:7f:46:24:33:f2:d9:ba:22:93:b4:0e:02:28:2e:aa:
31:de:80:61:3a:f2:08:43:ff:43:54:44:d3:46:8b:71:e1:e4:
98:ea:d8:aa:eb:62:49:d6:bd:6f:a4:93:bb:c4:3a:4d:20:a9:
72:fe:37:d0:35:e1:2a:da:71:97:35:43:4d:ae:82:87:19:47:
1b:d7:e4:5d:1c:2e:82:7c:c2:b0:fe:66:9b:16:93:79:cf:84:
f7:ba:37:d5:c6:9c:78:64:8f:f8:a6:4d:e7:5f:53:07:08:91:
44:22:52:16:bc:3a:32:fc:2d:a3:6c:59:7d:f4:b0:c8:bd:87:
5f:a3:c6:96:5c:dd:04:88:9e:bd:70:30:6f:bc:36:70:5f:8f:
07:b1:24:18:c2:69:a3:b9:b8:f5:d9:34:ec:13:16:79:46:dc:
37:0c:31:e2:29:23:de:25:4f:f9:a2:aa:ab:fc:a7:b4:04:12:
af:63:02:4c:dd:c1:2f:6b:c8:67:59:19:9d:91:80:48:47:cb:
f5:30:cc:52:42:80:e7:92:8d:34:9b:15:41:c3:ea:bf:52:8b:
c3:49:69:fa:c6:fc:fa:cd:8b:f1:1a:a9:1f:b8:e3:a8:3d:fa:
3f:ea:22:be:a3:4c:4a:4a:70:a8:0c:2f:c4:62:b7:62:fb:57:
72:67:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:51 2025 by rpki-client