Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa
File: 6f7d065b-e8db-3eae-837a-394398429919.roa (raw, json)
Hash identifier: ZDVNHHub+SkRN8mhiaD94Ny1G9YUZ6gXI3xm8uxFSZo=
Subject key identifier: 3A:07:F3:C6:EF:32:34:C4:B1:3C:96:24:6C:F5:7B:AB:97:7F:1B:D9
Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial: 010D0C9F432858486265927A14E91F3FBCF375C0
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 979
IP address blocks: 199.7.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:92:7a:14:e9:1f:3f:bc:f3:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=d6e42fbe-d38e-43ec-a2c5-de7b841bcd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:29:e5:fa:f9:c5:37:06:42:33:5e:63:a3:
10:fe:8f:e1:fb:aa:4d:2f:b3:47:8c:45:12:c7:84:
06:26:bf:56:fe:5c:c1:15:92:bc:97:8e:2c:a0:dc:
18:d7:27:50:0e:72:e7:00:db:b6:79:21:a4:e3:6f:
df:79:f4:5d:94:fd:03:a5:4d:66:de:c9:04:ad:93:
0a:11:95:6e:4f:f4:79:76:6f:28:42:d8:ca:7e:15:
1e:9e:26:80:b3:e9:d9:04:96:7a:12:49:d8:a9:64:
05:aa:2e:0a:5d:41:17:1a:d1:7a:aa:cd:20:a6:f7:
7f:5a:53:10:8b:fa:31:57:e1:a5:20:62:38:6a:ce:
d6:8b:ee:43:03:e4:5d:5b:e3:50:b8:e6:cc:34:9d:
41:22:32:cc:ba:e5:0d:3b:6b:0a:1a:f7:7c:f1:e8:
44:83:c6:a4:96:e7:9b:9e:57:82:9a:57:d7:79:d8:
c8:83:c0:6b:21:03:e3:1e:80:4b:06:f7:22:2d:87:
a7:8c:e8:09:ea:4a:13:71:37:c5:13:0f:ba:a0:3d:
8f:fd:8f:43:fa:48:59:b3:3b:48:4a:0d:34:51:ba:
bf:8e:4a:05:e5:98:7c:7d:3f:f0:5e:df:07:46:61:
42:0b:0d:b3:78:ca:e0:b2:ff:75:de:2e:4a:40:a3:
39:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:07:F3:C6:EF:32:34:C4:B1:3C:96:24:6C:F5:7B:AB:97:7F:1B:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
X509v3 Authority Key Identifier:
keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:38:8d:98:4d:b8:f1:aa:41:7d:fd:2c:ef:59:c2:33:25:e6:
47:d2:3f:3c:43:72:36:b7:05:70:fc:b4:81:9a:0c:84:04:19:
1e:13:bf:05:68:0e:2c:33:fd:49:6e:93:28:de:ac:98:d1:7d:
14:0a:29:7a:7d:07:b2:cc:5e:28:5e:09:21:fc:ea:3d:c3:60:
a9:5f:23:61:a4:4e:e6:59:f4:d5:2b:a9:2f:63:f0:bd:0c:36:
3e:71:d1:b2:6a:0e:e0:d5:25:1e:49:1f:29:de:00:94:b0:38:
ae:bb:b0:91:59:9d:89:ba:c1:cf:a9:0c:94:d9:6d:fd:d2:5b:
81:ad:18:cd:8c:5e:d4:af:1c:ef:a3:fc:7e:dd:c0:e8:15:3a:
ff:62:67:8b:9c:07:3b:55:5c:53:b0:a4:06:f9:f5:fe:82:c7:
b2:62:a3:10:10:35:d0:6f:fc:df:f8:40:35:f7:e8:d1:4c:fc:
c9:4d:97:f7:32:80:e9:3a:7f:c8:a1:96:15:c6:02:19:ab:1d:
cc:47:10:52:21:91:c8:86:3d:28:5a:22:6c:b2:ff:1d:9c:84:
24:a6:a6:fd:4e:aa:bd:0e:26:8e:b3:f8:ed:4d:ca:1a:68:66:
f9:80:6e:2f:b1:e1:17:74:28:45:b5:7d:29:07:d8:48:99:d1:
7a:17:ad:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:59:52 2025 by rpki-client