Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa
File: 3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa (raw, json)
Hash identifier: lknN8mioz6y5k6VyLpK+JKRl1dKsfJncH7XHS7uOGew=
Subject key identifier: 3C:5F:0D:E2:89:52:A4:CB:67:D4:26:86:12:28:E9:96:80:79:BE:85
Certificate issuer: /CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
Certificate serial: 010D0C9F432858489340A3A7488032E7443B1B20
Authority key identifier: 6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 19755
IP address blocks: 199.73.124.0/24 maxlen: 24
199.73.125.0/24 maxlen: 24
199.73.126.0/24 maxlen: 24
199.73.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a3:a7:48:80:32:e7:44:3b:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=1c0ca96f-5b27-4deb-b041-75495c34ba43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:6a:77:0a:8f:40:6e:3c:45:32:5d:32:90:
9f:a2:b6:93:18:fc:a6:9a:e3:a2:69:0d:90:3b:5b:
2f:f5:cb:88:c3:3e:e9:86:08:f2:6e:31:04:67:7e:
32:55:10:b0:b2:56:67:05:14:1c:08:53:0c:33:78:
55:7f:66:f6:7b:3a:61:df:37:8c:0c:f7:68:6c:af:
7c:43:bc:44:39:98:ee:6e:6a:3c:5a:10:64:7a:8c:
b9:70:75:9c:c6:bd:ce:31:18:75:9e:ef:cb:44:43:
20:c7:49:c2:b8:90:14:ba:42:ce:78:c1:f5:d5:92:
a7:90:18:c6:ba:d5:85:04:72:a5:0c:f9:eb:6e:91:
b1:5e:7e:bf:4b:b8:84:2e:cf:89:2c:67:b5:3a:15:
14:8d:a3:3f:10:23:55:5d:70:38:2d:ad:2b:20:a9:
7a:6e:ff:13:5a:ba:13:5c:4d:7f:55:7c:6f:02:ec:
ec:5a:91:86:32:86:aa:ba:9f:27:d9:fc:ae:be:3c:
1a:78:c0:78:d3:db:7a:c2:0e:54:6a:4a:e1:eb:8d:
8f:27:bc:16:4c:9b:f0:dc:28:e9:80:46:d8:f9:f3:
ca:81:f4:84:5e:c8:74:0a:67:ce:9a:9d:6b:09:46:
3b:44:de:c0:8c:6c:3c:8e:b4:d3:9e:32:0a:49:e0:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5F:0D:E2:89:52:A4:CB:67:D4:26:86:12:28:E9:96:80:79:BE:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.crl
X509v3 Authority Key Identifier:
keyid:6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
sbgp-ipAddrBlock: critical
IPv4:
199.73.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:2d:65:ff:de:5b:8a:02:17:7f:23:94:45:aa:f1:b4:f2:8d:
99:86:21:50:b2:8d:76:2d:d9:60:5a:1f:dd:76:80:cb:3c:ff:
93:bb:4a:f9:0f:0e:05:7d:61:09:2c:45:99:3f:69:9a:41:f8:
41:ea:31:fc:ab:bb:f5:03:88:b7:8a:57:c8:20:24:6e:78:7c:
cd:99:72:23:2a:7d:f7:fb:e9:af:81:89:75:ce:87:3b:35:10:
7f:96:18:ac:54:0f:2b:10:ee:b1:14:95:d4:75:97:6b:1a:bc:
eb:af:9d:b1:f1:88:83:90:d7:dc:19:85:bd:5b:d2:08:21:2f:
fa:5a:b5:df:d6:81:1c:7c:14:b7:51:f3:a8:ce:80:8a:a4:0d:
bc:e8:70:bb:8e:47:f9:6b:23:da:fa:a6:0d:de:ba:ab:9a:57:
93:03:2a:2e:37:62:67:6c:36:14:90:53:e7:ad:18:d1:24:5e:
b1:3b:06:cc:0e:d0:f9:57:bf:c9:85:1c:7d:f6:f4:f2:ca:4f:
ef:50:a9:39:1a:79:50:cf:20:54:b3:ae:81:97:56:92:c1:5d:
c7:35:ed:1a:cb:59:3c:52:73:95:07:e8:db:89:2e:81:c0:73:
84:b9:75:3b:3c:a3:d3:39:41:6c:11:6b:76:c5:0d:b1:75:8c:
33:a5:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:24 2025 by rpki-client