Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/8ee0a8b9-b99e-3cdd-a68f-e7c8847925e1.roa
File: 8ee0a8b9-b99e-3cdd-a68f-e7c8847925e1.roa (raw, json)
Hash identifier: oWr77nAZj3FKsKnrh/392yChLmH2tUQ4a/G+P3wEVFo=
Subject key identifier: 03:4B:05:18:A7:9C:A4:FC:0E:41:E1:E7:4F:86:C3:98:B6:0F:21:5B
Certificate issuer: /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
Certificate serial: 010D0C9F4328584876E7FA55D91C04F1C6519580
Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/8ee0a8b9-b99e-3cdd-a68f-e7c8847925e1.roa
Signing time: Tue 07 Jan 2025 10:19:41 +0000
ROA not before: Tue 07 Jan 2025 10:19:41 +0000
ROA not after: Mon 07 Apr 2025 09:19:41 +0000
asID: 36131
IP address blocks: 199.30.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:76:e7:fa:55:d9:1c:04:f1:c6:51:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
Validity
Not Before: Jan 7 10:19:41 2025 GMT
Not After : Apr 7 09:19:41 2025 GMT
Subject: CN=1c834ea0-5c9c-4438-a3a3-fa34dce97a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:0b:c9:4e:6e:b0:b2:5a:1b:10:11:ad:3d:
6d:44:c6:c3:04:68:ee:31:56:36:4e:6c:22:fa:79:
86:b7:01:eb:fa:8f:74:d4:3a:0b:ce:97:d8:dc:b2:
f2:b8:21:16:d6:29:e1:33:41:c7:0e:fa:e5:ff:6e:
b8:02:a3:62:7b:b6:6c:cc:87:d2:8b:da:e3:58:9e:
13:4d:a5:1b:ce:82:12:cf:ef:04:b2:9b:42:2f:72:
cf:a7:d8:e1:fe:21:03:c0:81:5b:c9:af:59:c1:58:
7e:fb:b1:02:18:0a:44:cf:5e:48:d3:2c:ae:6f:86:
61:0e:6e:8d:25:64:a1:48:a0:ba:79:4d:e3:81:b7:
05:e0:c4:66:46:99:ee:cb:4d:b1:3c:63:02:72:c9:
ca:f9:25:df:09:b7:9e:1e:62:41:cf:50:75:80:60:
cf:96:d6:a3:05:73:02:64:b2:b5:15:a9:ce:cc:ab:
4c:56:01:cc:be:8e:73:0a:8d:8c:cb:b9:b6:89:ba:
cf:2f:ed:80:d4:00:9f:ea:c8:f5:c8:43:26:f9:da:
73:7e:08:ae:36:95:9a:96:91:db:ae:72:d1:95:22:
93:c0:d2:06:e4:41:df:1c:fe:9c:a2:1a:67:91:c5:
a9:48:c2:56:32:96:76:4b:da:cd:8e:38:13:e5:d8:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4B:05:18:A7:9C:A4:FC:0E:41:E1:E7:4F:86:C3:98:B6:0F:21:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/8ee0a8b9-b99e-3cdd-a68f-e7c8847925e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl
X509v3 Authority Key Identifier:
keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
sbgp-ipAddrBlock: critical
IPv4:
199.30.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:06:f2:f2:ad:a4:7f:de:bf:ab:01:0b:62:7b:1d:88:30:9b:
47:ae:19:79:b4:2f:c7:4e:50:52:39:e4:2d:05:44:28:8e:75:
ef:fe:72:c9:31:a6:16:41:fc:08:c1:ba:b2:8c:08:f8:2b:14:
a4:8d:cd:40:31:39:97:50:d2:63:e6:ef:ed:fa:18:8f:4f:2a:
0e:5b:73:1a:32:bd:d2:ff:ce:9b:01:13:9c:94:8b:1b:5e:4c:
93:3b:ee:4c:3a:7d:10:ac:53:27:4e:b3:6d:ba:d4:e9:ba:e8:
0f:c4:73:11:84:26:3b:6c:04:2d:ce:4d:03:ef:7d:cc:0f:7f:
58:87:bd:c6:94:4c:81:d1:3d:1a:19:ce:8a:58:f4:e1:75:a7:
f0:dd:ae:8f:40:6d:5b:55:60:cb:fc:f2:20:c4:2b:cd:c9:63:
32:ea:e5:58:a9:7b:4d:e8:af:06:5b:40:77:6d:5c:47:e6:93:
b4:3a:63:ea:4c:07:4d:c5:8b:96:19:28:d9:b1:da:62:3c:a8:
d0:10:ae:b7:eb:bc:de:10:3b:79:fe:75:97:96:61:77:70:b4:
03:9d:05:47:2c:63:ab:38:d8:9f:6b:cd:5b:06:bd:9b:37:27:
28:8a:dc:a8:91:c8:74:ab:00:68:8c:56:2c:54:65:38:ab:f9:
8e:c5:1a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:30:10 2025 by rpki-client