Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/2ef512bf-2011-3ef3-a834-b8929445ea4a.roa
File: 2ef512bf-2011-3ef3-a834-b8929445ea4a.roa (raw, json)
Hash identifier: iQEMc7NwQLSAm5jl5VCmV1I7NlMoAhmu3zZn76VRa28=
Subject key identifier: E4:BD:F3:67:5E:C8:92:91:36:63:89:1D:D8:64:85:68:4E:D2:1A:0B
Certificate issuer: /CN=405ae070-e9e9-4d3c-b449-868426ff2303
Certificate serial: 010D0C9F432858480BDA65B0D44982F920C4E330
Authority key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/2ef512bf-2011-3ef3-a834-b8929445ea4a.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 15296
IP address blocks: 199.116.232.0/22 maxlen: 22
199.116.232.0/24 maxlen: 24
199.116.233.0/24 maxlen: 24
199.116.234.0/24 maxlen: 24
199.116.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:65:b0:d4:49:82:f9:20:c4:e3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405ae070-e9e9-4d3c-b449-868426ff2303
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=143536af-717d-4c68-91ce-3d2f339fcd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:32:09:ec:42:0e:f8:fc:9a:d1:5b:6b:60:
48:89:af:69:af:d3:b4:56:43:89:94:43:85:84:0f:
11:fd:a8:e3:e9:bd:6e:1b:d5:bd:d5:3f:9f:21:a2:
21:a3:64:cb:18:15:ce:66:94:87:af:3c:84:5f:73:
f7:2f:84:b9:d8:de:c5:7b:35:75:e2:58:8e:78:89:
0e:58:20:7b:a0:23:07:36:73:89:b3:b8:5c:fb:1f:
16:2d:48:22:62:a2:f7:33:1a:bc:74:bf:8e:96:17:
6f:01:0a:a7:66:71:24:5f:d2:5a:4e:c2:3f:01:72:
e3:00:87:a5:c9:62:14:c9:4d:65:37:2e:48:73:f3:
69:72:5e:20:9c:9e:bb:54:b0:b8:c5:ae:b0:de:92:
05:c2:71:11:7d:32:16:52:25:a8:fa:45:9a:a5:c9:
1e:a1:31:59:ba:1f:44:32:d2:2f:4b:d6:0e:d5:89:
65:8b:22:c4:a0:1f:41:cf:0a:e5:86:bb:76:c0:d9:
d5:1a:b5:75:9c:2d:56:3b:04:d8:1b:ed:ed:0e:41:
b9:b4:b6:2f:e3:a7:88:0d:cd:9a:51:f6:d1:1f:25:
3d:48:63:29:b6:fe:d9:27:42:8f:49:19:aa:d9:4a:
92:32:13:6d:5d:28:97:cb:7c:73:41:03:93:bd:d9:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BD:F3:67:5E:C8:92:91:36:63:89:1D:D8:64:85:68:4E:D2:1A:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/2ef512bf-2011-3ef3-a834-b8929445ea4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
X509v3 Authority Key Identifier:
keyid:F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
sbgp-ipAddrBlock: critical
IPv4:
199.116.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:ea:90:f2:a0:92:22:ff:75:f1:82:2a:20:df:fc:99:16:32:
bc:77:8b:e6:f5:43:42:0e:a5:ca:46:cd:80:99:fa:ea:a4:8e:
0b:92:99:dc:78:68:5e:a2:7f:ff:2f:f0:08:d9:8a:79:bd:51:
ca:18:88:56:27:cb:81:7d:78:b4:06:ee:30:4d:90:15:9e:7d:
33:c8:b8:6d:6e:94:aa:ca:12:4e:c8:6f:04:1e:83:5a:a6:5d:
c2:01:7a:b1:34:9f:39:9d:81:4f:d2:5f:fd:2a:fb:5b:06:45:
88:52:d4:b3:72:34:c2:98:78:b2:03:de:11:4b:a2:84:1b:d6:
0b:fd:b6:b7:c3:4f:0b:c4:81:2c:f0:76:d3:5b:fd:60:af:b0:
a5:0c:23:83:bb:30:fe:8c:e8:0d:ff:08:54:e9:ab:c0:76:75:
c6:78:a2:96:1e:64:b8:77:da:b3:6a:5f:0d:e9:5e:c0:4d:b5:
12:30:c0:f5:a6:e5:0e:8e:96:16:8d:88:0d:99:7f:08:fa:1e:
cf:d3:f1:3a:c0:ea:af:4c:12:04:fa:36:f3:e3:dc:00:82:56:
f0:9a:1a:b8:3c:e1:e0:38:8a:6c:f9:de:ae:c5:be:ef:c3:9a:
7f:02:f3:5a:53:99:b4:e2:12:1b:d4:aa:a4:4a:ad:e9:1b:5d:
e7:30:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:12:38 2025 by rpki-client