Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa
File: 48aa2ac1-aac8-3382-92a2-8a030207b08b.roa (raw, json)
Hash identifier: nOCU75Sai/d7Sp4ygV/EE4ZaV/uYzuzTFM70QxHYh2A=
Subject key identifier: 6A:81:B3:8B:B1:A6:06:A8:54:49:5B:2F:CA:E2:D9:7F:9C:64:A9:78
Certificate issuer: /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
Certificate serial: 010D0C9F4328584827C5315D5DEA67781EBB0A80
Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 12186
IP address blocks: 199.168.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:31:5d:5d:ea:67:78:1e:bb:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=2f3e73c1-8e1f-400c-957b-a9c85863c40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:b5:70:d2:88:e2:95:8a:5d:0f:eb:ec:6a:
fe:d0:a2:45:ff:49:b6:21:6e:64:a0:e0:ff:d4:13:
9f:dc:bc:b8:41:fa:55:b5:22:d9:c6:52:44:37:7c:
75:e1:f5:cb:8d:74:1a:fb:ee:e2:9e:72:2e:e6:22:
e5:f5:c2:47:9d:c3:94:af:70:ba:43:de:45:1d:73:
e4:38:0c:07:d9:81:21:2d:f1:5a:b7:3f:29:d6:41:
8e:bb:76:25:3d:2b:d1:29:d5:a0:2a:31:0b:5c:ed:
ec:4e:70:c3:12:6e:df:d4:ae:b7:d4:9c:bd:89:ea:
fe:25:2c:65:c4:cd:2a:a6:f0:e7:e4:69:6d:48:3e:
1e:0e:fe:59:d9:58:50:17:9c:14:31:a8:3e:61:d1:
b9:79:d4:55:0d:5a:dc:05:26:7c:68:bc:43:c3:92:
24:63:72:ae:a7:16:57:a9:89:15:b4:f2:2d:49:b6:
91:63:38:f7:3f:94:b0:80:dc:01:bc:a7:16:c1:9a:
c7:95:bd:6f:9f:6b:b9:f0:79:6c:59:bf:f2:fa:12:
81:a8:c0:4c:28:19:05:02:a1:d7:32:d3:5b:b8:54:
cd:a0:ab:75:1d:68:eb:59:fe:67:32:0d:36:5b:48:
8a:8c:96:fc:45:ce:ed:a8:d8:20:5b:7a:ab:ef:db:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:81:B3:8B:B1:A6:06:A8:54:49:5B:2F:CA:E2:D9:7F:9C:64:A9:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl
X509v3 Authority Key Identifier:
keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
sbgp-ipAddrBlock: critical
IPv4:
199.168.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:cf:d4:b4:a5:e5:07:58:7c:e9:a2:06:85:a3:5b:da:de:bf:
df:df:e0:76:c0:90:4f:a3:d2:60:95:4c:cb:a8:06:0c:c0:38:
77:d0:60:5d:b0:18:14:12:b1:1e:3d:5d:4d:f1:83:75:fe:e7:
e8:a1:2f:98:c9:90:7e:a3:70:78:9e:59:45:78:a6:db:53:0e:
bc:25:fe:10:78:cb:e7:06:05:ec:3d:88:3d:9d:f6:54:82:d9:
c6:4d:75:af:5e:3d:01:9c:62:d6:23:3b:db:df:22:c4:07:56:
7f:47:5e:f0:2e:92:e2:8f:8e:cc:3a:1c:ff:f2:94:44:1c:70:
76:13:8e:96:13:d2:d5:5b:8f:43:90:c3:0a:27:6c:e5:1d:77:
1c:a8:11:2a:55:f8:d2:3c:c9:71:dc:ce:51:c3:27:f0:6a:8f:
f1:82:14:98:47:52:23:c9:34:96:1b:7d:42:0b:77:f9:7b:fa:
93:83:e5:80:74:9a:0a:ed:cc:34:1a:a4:34:85:3e:92:45:f7:
98:b2:f3:e7:3a:c1:ba:7a:0a:3d:5b:45:02:ee:2a:41:43:1c:
a2:58:3c:68:f6:bd:0a:21:a7:86:d2:b4:97:9d:3c:63:87:ea:
68:55:4e:4b:18:aa:4a:27:fc:29:2a:b8:04:8b:d8:70:d1:f4:
5c:88:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:30 2025 by rpki-client