Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa
File: 9bd82531-e23a-32e9-a00b-bac423c66412.roa (raw, json)
Hash identifier: NT+wSuA3LZgwe97ZzfZvrTYk6e0n4nm7A7EXOlAXtUU=
Subject key identifier: 0F:15:A9:8E:41:E9:3C:B0:D7:B1:37:E1:3C:10:1D:79:73:8E:62:FF
Certificate issuer: /CN=23c7fd31-20a5-4b68-a62a-88cba184f1be
Certificate serial: 010D0C9F43285848388557FFC54BE61FCB1B9880
Authority key identifier: EC:D4:DA:74:03:90:9F:29:73:CD:8F:80:02:71:19:0B:03:C7:9B:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 29696
IP address blocks: 162.249.48.0/21 maxlen: 24
199.34.14.0/23 maxlen: 24
199.200.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:57:ff:c5:4b:e6:1f:cb:1b:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c7fd31-20a5-4b68-a62a-88cba184f1be
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=9b417ac2-aabd-4633-9e20-ad9beda7b45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:11:52:b3:81:ab:5a:97:ee:79:7e:cb:72:
48:c4:e8:ba:3e:e4:6f:ea:83:e0:7b:27:7f:dc:24:
60:67:b7:af:f0:d1:57:30:20:00:d0:65:c7:80:57:
75:36:93:22:e9:c9:03:d2:83:6c:ec:88:be:e1:a3:
3f:5b:bd:f5:c2:86:f0:c7:cd:ee:92:73:02:80:ed:
23:11:81:fb:86:6c:67:19:05:0d:b3:d3:12:1b:f4:
35:d1:7b:a3:da:b0:93:9e:d0:7b:8c:e1:30:a2:22:
e7:7e:53:e3:bc:d6:87:a8:3b:79:2d:68:39:d6:fb:
ad:35:aa:be:32:06:79:b8:44:94:4b:4c:54:47:c0:
bb:2c:1c:c1:85:29:ae:e0:8a:b6:eb:c1:07:29:c8:
d3:f9:8c:b8:95:2d:90:9b:f5:c8:4c:9d:f6:37:51:
df:04:1d:4f:df:0c:51:f7:6d:32:72:8f:7f:2d:8c:
9e:54:63:f3:96:67:84:1d:cf:fe:6e:ce:c3:51:e5:
20:d7:db:f9:9c:08:70:fb:e5:f3:b9:cb:47:d4:1b:
c3:ae:20:be:34:38:fb:ce:06:c4:76:ac:5a:fe:03:
59:41:75:e0:42:38:b0:11:53:dc:59:f3:94:69:64:
31:31:95:8b:c9:30:c5:d9:50:94:82:e1:25:47:a7:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:A9:8E:41:E9:3C:B0:D7:B1:37:E1:3C:10:1D:79:73:8E:62:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/23c7fd31-20a5-4b68-a62a-88cba184f1be.crl
X509v3 Authority Key Identifier:
keyid:EC:D4:DA:74:03:90:9F:29:73:CD:8F:80:02:71:19:0B:03:C7:9B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be.cer
sbgp-ipAddrBlock: critical
IPv4:
162.249.48.0/21
199.34.14.0/23
199.200.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:2d:56:24:36:af:53:b6:3a:65:4c:e1:89:cb:5c:94:a9:2a:
42:4f:47:e3:dc:98:a5:8b:e5:cf:be:30:95:4d:d7:31:3c:44:
57:28:5a:9a:53:1a:37:10:50:47:90:1c:36:25:14:12:37:f1:
31:79:fc:1f:97:40:80:e6:10:7f:76:1f:aa:64:47:c6:0f:05:
e1:b0:c2:e7:4b:78:5d:a5:3d:ff:aa:98:d0:35:f7:47:b4:70:
ba:bc:c8:4e:bc:a7:68:f2:03:fd:3e:b5:55:f5:9c:67:89:e1:
cc:55:a9:cf:4b:55:24:23:75:bc:9e:af:d6:80:c9:0f:98:a3:
fa:14:0a:60:f2:af:b4:4e:57:de:59:54:89:61:0f:cd:d9:ef:
a4:82:47:c6:2c:ab:e0:f6:39:a1:30:e7:6a:48:5b:76:50:51:
c9:1d:0e:e9:2b:44:d8:bd:aa:e4:97:35:c4:42:6c:ee:82:df:
fb:d9:e5:0b:92:43:d2:97:5b:13:80:97:2f:12:51:08:12:e5:
7a:84:8a:7a:42:cc:2f:32:c7:cf:11:04:d8:df:04:7b:19:80:
bf:69:48:be:bc:aa:6f:71:15:1a:c4:ad:40:ec:1e:8a:68:5b:
0f:06:5e:66:5b:98:11:50:de:0d:c2:45:e6:d8:dc:70:3c:44:
34:9f:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:50:14 2025 by rpki-client