Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa
File: 44093855-c660-345f-9454-29953b3f2acb.roa (raw, json)
Hash identifier: qeiZMKNJaWpOgY4tu7+8Dl0NMuxpWVNijxhg1A+pgM0=
Subject key identifier: A6:F7:C9:D1:27:8A:25:06:B9:E7:AD:67:8B:12:32:42:A6:D4:56:A0
Certificate issuer: /CN=fbe88551-e36f-4364-ac40-a262166c72ad
Certificate serial: 010D0C9F4328584882808C307EEAD4C5BB025913
Authority key identifier: A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 63435
IP address blocks: 199.58.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8c:30:7e:ea:d4:c5:bb:02:59:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbe88551-e36f-4364-ac40-a262166c72ad
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=c812e6cb-2336-4c94-8530-9db2995c4c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:e6:4e:8d:1c:a4:21:a1:99:d8:4d:10:d1:
2b:80:6b:9e:2b:e2:5c:ba:66:a7:5e:96:2c:bc:ae:
04:a8:09:04:81:1a:28:c5:60:9e:41:c2:eb:fc:e3:
24:a6:2d:53:62:3b:ff:63:a4:a1:7b:7f:be:b1:bf:
f3:6e:b1:f2:10:3d:6b:e1:bb:06:e2:67:a9:1c:72:
ea:34:e5:ea:8c:0c:97:ee:60:86:1a:f0:9b:36:21:
3d:15:a5:ee:2c:99:77:4d:42:d6:42:28:ae:3b:06:
45:1a:f6:06:e3:10:e1:29:ea:63:fa:54:92:2f:c3:
c1:f6:8b:47:4f:82:53:2a:af:2e:ff:fd:2c:e6:bb:
7b:88:34:22:39:9a:41:2d:bc:2c:96:45:d3:26:9a:
02:ba:79:42:58:7e:c3:58:6f:f7:fb:bf:76:6b:d5:
bb:4e:61:20:e0:3d:71:42:4b:99:b7:e2:9b:ed:3d:
07:19:fd:5a:ab:a6:ee:9b:46:0b:88:24:8d:a1:8e:
78:ac:02:27:ce:c8:ea:97:35:08:1b:ae:f5:6c:41:
d8:7a:b8:8c:ac:ab:31:77:77:2d:e8:ac:61:b8:0f:
c2:e4:f8:c4:f5:73:13:16:8d:d7:bc:a9:ce:f6:18:
8a:f0:c3:e2:8c:bb:a9:26:72:bd:53:71:d5:94:7e:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:C9:D1:27:8A:25:06:B9:E7:AD:67:8B:12:32:42:A6:D4:56:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.crl
X509v3 Authority Key Identifier:
keyid:A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:79:9e:da:b5:c1:4a:e4:d9:20:a8:3a:72:9f:82:e3:77:b2:
31:4c:fa:d0:98:47:58:4c:dd:d3:c1:ba:57:47:e0:fa:d0:85:
2a:27:ae:ee:3b:a1:ce:d0:ee:b1:a0:d2:b9:3d:6c:49:90:a7:
7d:be:2c:3b:bb:61:cb:12:a6:43:4c:4b:f0:90:31:6d:6d:89:
3c:8d:23:1b:86:eb:73:6f:09:5f:70:44:bb:bc:30:09:a4:4f:
8f:6c:4b:3b:76:ef:2c:66:88:c7:2c:09:f9:3b:55:8d:28:87:
f6:7b:5a:2f:2f:bb:a5:47:89:58:75:d9:97:1f:da:f0:85:cd:
1a:8d:4d:5c:01:0f:ea:a3:49:4c:ad:eb:65:e6:42:31:26:6f:
9b:cd:7c:66:b9:7b:6e:1b:5a:88:5a:f0:40:4c:7c:94:7f:97:
e9:0a:5e:24:af:a0:97:f9:00:40:29:c6:d2:df:49:d6:39:a2:
d4:56:33:58:74:ea:ac:b0:9e:79:48:c5:64:fe:5c:12:e1:1e:
b6:c3:56:95:84:fc:d5:3a:e1:c4:c9:22:8b:78:74:b9:7e:c6:
77:34:80:8c:f9:ca:b2:22:19:75:1e:53:52:3e:03:49:b3:b6:
50:96:45:7f:9b:de:21:52:e6:54:af:74:b1:ed:2d:16:da:ee:
2e:c4:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:12:30 2025 by rpki-client