Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/2ef613c6-a522-306e-bd8c-fc8133312b16.roa
File: 2ef613c6-a522-306e-bd8c-fc8133312b16.roa (raw, json)
Hash identifier: WYpQMaIR+oa3F99NCB5NcykCzqFLH/2VeBwLlL7Sgu0=
Subject key identifier: C5:07:DC:50:3C:65:F7:36:91:6D:8D:EA:01:1F:0C:68:25:1E:11:EB
Certificate issuer: /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
Certificate serial: 010D0C9F432858488AE09D4F08993709DA46D200
Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/2ef613c6-a522-306e-bd8c-fc8133312b16.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 14041
IP address blocks: 199.96.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9d:4f:08:99:37:09:da:46:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=cc8391b1-9761-401e-8bce-d23554968797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:0c:73:91:aa:cf:20:fc:49:dc:93:71:2d:
b1:fa:de:da:94:f0:eb:e7:2a:90:74:22:43:f7:24:
ab:d3:ae:d7:76:ed:16:a2:50:ee:ff:bf:5f:31:6c:
a5:8a:1b:63:60:ee:cd:9f:6a:48:07:13:7f:f1:9c:
13:10:94:c7:a5:28:21:cc:aa:74:1a:b2:41:93:32:
23:92:50:3e:dd:a5:d2:54:79:d9:c5:01:28:35:cd:
df:23:eb:4a:96:93:12:ef:20:d0:ee:d5:75:00:3b:
2f:08:21:aa:9d:98:98:16:fa:39:f2:14:cc:2a:1f:
ca:b2:dc:b4:9b:86:81:f0:fa:9f:b1:5a:8d:7c:f2:
ca:36:a0:ee:40:e9:7d:f3:6e:6a:10:b4:b4:bf:03:
9b:97:fb:ad:be:51:89:23:50:94:4f:f8:a0:f0:84:
92:fa:b3:2e:70:ad:1b:9e:ba:cc:cc:6f:3a:25:7f:
8b:61:18:f4:21:dc:8e:60:2f:41:64:d7:01:a2:53:
f5:f5:a6:38:94:7f:36:c7:90:ac:2e:ca:f8:64:05:
f2:7c:90:84:0b:3c:77:6b:af:4d:ec:36:ed:b8:04:
66:1f:45:a7:30:02:76:ff:ff:e4:9f:01:57:73:93:
39:c4:73:91:82:bb:cb:d8:0b:5d:82:31:9a:96:67:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:07:DC:50:3C:65:F7:36:91:6D:8D:EA:01:1F:0C:68:25:1E:11:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/2ef613c6-a522-306e-bd8c-fc8133312b16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl
X509v3 Authority Key Identifier:
keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:e4:2e:53:de:0e:eb:c2:c1:dc:5e:d7:f0:e7:b9:ce:78:7b:
9c:8a:33:fc:bf:9e:ca:8d:27:a0:67:ee:d8:c8:22:5e:42:54:
10:3c:0a:da:fa:da:9d:0a:55:b1:b5:37:13:a4:cd:41:86:31:
8f:2e:20:dd:b9:50:19:69:7d:33:7c:8f:b5:49:59:0e:85:6e:
62:70:b1:b6:67:cc:c8:92:a5:64:59:a8:34:ee:15:ca:af:9b:
7a:3e:52:9e:54:f8:55:90:b1:d4:5b:1b:f2:de:4d:5f:c7:d6:
80:b5:20:9b:83:6a:00:58:da:53:31:76:64:47:41:b4:06:5b:
bd:06:43:6c:ec:08:ba:fe:b4:6b:20:b1:2e:b0:0e:73:77:5b:
41:85:de:09:ba:c4:83:1b:40:ca:0e:4d:f4:31:b8:ed:2c:54:
6f:b3:53:c6:71:05:ad:0a:80:40:65:df:b8:a6:55:8c:51:be:
0b:94:ac:66:26:41:18:1e:af:46:88:0d:43:a3:5c:3e:cc:57:
f5:ac:89:21:47:bd:f9:64:37:b0:a4:d4:9d:f7:0b:f7:d9:46:
c7:84:b9:d8:b7:cb:9c:af:ea:cb:db:8b:55:3b:7e:fe:5a:0b:
0c:84:94:0f:08:39:c4:48:37:d6:23:b6:da:54:3e:6e:fe:a2:
4b:73:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:39:14 2025 by rpki-client