Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6f49c63d-e065-3db2-8d6a-60ab719baef7.roa
File: 6f49c63d-e065-3db2-8d6a-60ab719baef7.roa (raw, json)
Hash identifier: uboCvk6eesGTDMl6A5YLQEQvRP6kDYWaWKqxXkv1DCM=
Subject key identifier: 54:F0:D6:93:A1:63:DE:8F:AC:B8:E7:9B:F0:CC:30:7A:22:47:F5:18
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848222FE5125C8576D8B23A8F00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6f49c63d-e065-3db2-8d6a-60ab719baef7.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 199.192.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e5:12:5c:85:76:d8:b2:3a:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=60c66d18-41bc-4d43-9e8f-b329ec638f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:8e:c0:29:67:51:d8:8a:37:d4:8c:cf:64:
6e:44:c7:b4:86:31:d4:0d:b6:9a:71:8b:0c:8a:da:
8e:48:f3:0b:63:49:df:51:90:c9:70:d4:55:59:85:
f1:5c:80:4d:1f:20:0c:3b:da:bd:13:5c:b2:93:70:
be:6c:09:54:70:cb:42:30:60:68:f8:26:8a:63:60:
d3:89:d6:8d:f6:58:86:a4:b2:da:f7:cd:bf:a7:9f:
25:ca:bd:a9:b8:83:14:30:b7:14:ef:14:3e:90:70:
67:51:9a:c5:2f:93:eb:12:fe:40:67:1d:98:54:35:
6f:61:2f:a7:fc:5d:6e:f0:d5:35:f4:50:05:44:8f:
de:f5:01:bc:2e:89:3e:13:0d:39:ae:97:9e:03:d2:
db:62:b7:10:80:75:78:37:45:65:97:23:5e:94:70:
85:e1:8e:40:e5:f4:b7:d3:d3:14:13:53:d1:0d:a6:
1b:95:b0:9a:57:37:b1:d3:23:db:12:0f:bd:f7:84:
41:5e:54:3a:fc:30:35:6f:b4:5e:c6:a1:7d:55:81:
0d:8b:5a:a1:61:38:cd:b5:5a:7d:c6:30:77:a5:09:
11:42:74:48:1c:21:84:6a:eb:2f:37:0c:51:08:63:
a3:db:bb:09:95:b3:5f:3d:aa:8d:96:89:48:aa:14:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F0:D6:93:A1:63:DE:8F:AC:B8:E7:9B:F0:CC:30:7A:22:47:F5:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6f49c63d-e065-3db2-8d6a-60ab719baef7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
199.192.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:57:51:e7:40:b1:72:65:74:7c:9d:23:8d:18:ee:65:b3:ad:
03:4f:b9:82:38:5e:ed:a0:78:8a:77:a5:d1:20:fc:aa:b3:e8:
d0:df:dd:12:89:88:96:6c:8c:04:73:35:d0:85:78:bb:3b:bd:
d4:6a:bf:9e:0a:84:4c:03:59:0f:91:c4:19:54:66:44:9d:50:
cf:d0:c0:fc:07:05:c8:6e:51:e7:00:7a:d5:cb:95:49:1c:ca:
e1:6c:1a:26:1c:f2:7b:04:b1:49:e2:bb:80:25:88:03:ea:3d:
28:09:cb:72:5d:2a:8a:e9:1f:ad:a0:af:5f:b8:68:46:e5:f2:
3c:e7:0c:af:69:b6:64:6c:42:bc:85:df:c4:6d:ab:a7:a3:63:
4b:99:8c:9f:19:48:b7:2f:b9:44:2f:b3:54:7c:df:e7:21:cc:
2f:2f:1f:51:42:c1:e1:7b:a5:5a:f0:ed:b0:34:a0:02:96:17:
cf:fc:b5:1f:c7:3b:95:4e:df:28:f4:1c:c0:be:b0:83:1d:6f:
24:52:e1:52:9c:61:a5:1c:27:9b:f2:32:b5:32:95:e8:6c:63:
69:54:48:c7:0d:9c:e7:06:c5:5b:53:14:12:3a:00:c0:ad:ff:
16:99:59:7a:3a:0e:b1:68:b6:30:d2:cb:01:97:77:be:10:72:
97:ec:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:57 2025 by rpki-client