Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa
File: 1d5b64a0-14ba-398c-be22-b579612157ce.roa (raw, json)
Hash identifier: uAdyFwtsAIXWSPoFE0Qwdii8daSIb8iKT5yZhwKwXOg=
Subject key identifier: A4:84:88:3A:52:F3:52:8E:94:AE:B3:91:D6:31:62:86:34:28:17:EE
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858485CD030F0B64307C8E7551340
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 21949
IP address blocks: 199.167.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:30:f0:b6:43:07:c8:e7:55:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=89800690-e23d-41cd-ba3d-d3e283abdcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:3c:0e:49:52:4c:d1:92:e9:50:77:55:90:
22:ec:be:3b:97:ac:c9:22:c7:b9:4e:e0:d0:ef:0b:
bd:a7:89:81:56:d1:20:13:68:b7:ca:6b:60:50:18:
73:4b:09:7b:46:a2:94:76:fc:70:d0:8f:47:ec:60:
bf:cf:bd:a5:ea:44:8a:5c:f5:a7:45:ef:89:1a:eb:
18:88:1b:b7:74:67:0a:a9:9e:89:24:48:f4:0a:cd:
43:87:5c:6e:ae:35:8b:ef:06:f4:c6:44:bf:64:68:
4b:c3:ab:63:91:a0:00:58:31:64:3f:6b:1b:2f:75:
a8:08:6a:23:5a:51:f4:05:9a:5a:11:f7:b4:2c:ce:
51:39:cf:34:e8:bd:dc:09:86:b1:3f:d0:e5:74:f7:
38:d1:ee:7b:7d:a2:ea:17:bd:90:4a:25:d4:84:fe:
6d:89:74:2d:d9:e2:e3:e7:00:05:d0:fe:00:69:64:
e7:b9:e6:39:b2:f3:78:d1:5b:3e:4d:e0:11:af:86:
5b:61:87:dc:71:84:e5:80:90:ca:d0:ba:9e:84:24:
2c:ba:b8:f0:d1:d0:f3:0d:c1:ce:ac:ef:59:23:9f:
85:99:eb:c2:cf:aa:44:62:38:f8:d9:fb:99:3e:29:
fd:05:91:9b:73:1e:43:4f:21:88:ea:08:69:c1:b9:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:84:88:3A:52:F3:52:8E:94:AE:B3:91:D6:31:62:86:34:28:17:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:90:e4:a0:42:00:9f:a1:50:62:68:13:c3:6d:81:92:24:8f:
eb:aa:7c:e1:60:a0:e1:fb:3c:d4:20:d5:92:56:c5:15:8e:c9:
a6:1a:c0:ed:65:74:51:ee:b0:de:26:93:16:dd:95:cc:9d:b9:
18:8d:b4:32:ef:b4:df:a6:a4:00:ee:4c:ba:d0:e9:a4:bf:d9:
6e:56:75:9e:b0:16:7d:79:55:74:cb:39:f0:57:3c:17:3c:e1:
31:f7:51:71:f4:b0:82:c3:d0:40:22:c7:cc:b5:ac:e9:cc:7a:
5d:ca:28:bf:af:18:fb:ff:11:85:c3:6f:10:36:88:64:ae:ef:
21:b9:58:c5:2b:65:4e:c4:42:f7:4d:f6:56:b3:d1:70:53:7f:
b6:16:1c:86:3f:8f:ff:52:f7:1d:25:7f:43:4a:95:78:04:99:
a5:b0:a1:cb:98:27:62:5c:41:a1:36:a6:5d:29:08:e1:68:68:
26:35:61:13:30:24:49:ea:d1:5e:aa:66:18:9a:f9:3d:77:62:
9a:df:96:56:98:88:2b:d8:d9:fa:31:ed:70:e4:da:28:0a:bc:
0b:04:7b:00:03:41:d2:10:42:79:b0:4d:3c:7c:c5:6d:95:37:
31:71:13:93:71:e5:6d:26:fd:b7:84:e1:57:4c:b3:48:40:36:
aa:f9:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:51 2025 by rpki-client