Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa
File: a0319291-6260-33b7-94e3-177209ea6dc7.roa (raw, json)
Hash identifier: fiJOn0s5SDO1sJDz9ebW0B11psnv5I7/9tzMb43fkZc=
Subject key identifier: 4F:53:7D:C5:BE:22:B7:36:D5:18:CB:52:C9:D9:C7:31:20:D2:CF:D5
Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Certificate serial: 010D0C9F4328584855D595DB0AEAFA62F70010B0
Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 394449
IP address blocks: 199.68.53.0/24 maxlen: 24
2604:3dc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:95:db:0a:ea:fa:62:f7:00:10:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=d9b5860e-0f38-4c84-88c9-b7e08ba8eab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:1f:39:68:a2:2e:99:dd:f5:91:5e:83:5b:
7c:cb:9e:e3:c3:2f:fb:6b:e6:32:37:8d:13:f8:c6:
3a:9d:65:cd:62:7d:d5:e2:5e:b0:65:ba:e6:4e:d0:
95:ea:e3:93:6a:f3:18:6d:9d:38:c8:2a:75:4c:cf:
1a:c8:a2:80:c6:cd:d9:62:83:6e:47:89:7c:02:45:
e3:d4:cc:5d:6c:e2:01:8d:3d:cc:fd:b5:96:7b:cb:
63:22:31:f3:50:e0:d5:90:b5:65:cc:93:8b:a7:da:
93:a5:42:9a:67:38:d2:73:45:27:12:88:16:4d:82:
59:c5:3e:e3:2c:bb:99:4e:57:59:7b:bf:6e:6e:6a:
30:15:d2:50:1a:5f:c2:5e:b2:c6:63:4a:82:46:06:
5e:0e:0d:76:6a:eb:22:8d:9e:6d:1d:c0:88:88:61:
ba:4d:52:c9:f7:75:dc:bc:80:92:72:b2:f2:bc:57:
c4:52:84:33:1b:49:c8:db:2b:93:e9:53:19:9c:9e:
3b:01:73:8a:0b:53:1c:99:3a:ca:8b:9a:16:11:d0:
bf:28:c0:c6:a7:eb:46:a3:e5:9a:42:2c:d9:07:a5:
f3:44:0f:c7:be:d4:a4:4c:ea:ac:f5:7b:8d:96:ab:
6d:55:20:c4:a9:42:db:49:94:9b:c6:10:09:3e:01:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:53:7D:C5:BE:22:B7:36:D5:18:CB:52:C9:D9:C7:31:20:D2:CF:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl
X509v3 Authority Key Identifier:
keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.53.0/24
IPv6:
2604:3dc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:90:51:12:dd:39:f2:64:a1:f2:b4:11:24:42:00:e5:4c:32:
18:60:a1:87:7f:e2:60:48:f4:94:7b:5e:b4:e8:b9:4c:07:27:
78:41:b8:bb:38:a1:de:43:0e:71:3b:09:1a:ab:a5:7a:ec:3d:
e4:a4:a9:f7:26:9f:de:aa:68:f4:15:6d:65:b3:9a:45:2d:7c:
74:6f:38:55:8d:d2:5b:e8:2f:fa:fc:61:e9:74:67:7c:27:67:
d3:5c:a5:8e:ca:cb:7f:bb:6e:17:36:d1:81:b3:a2:f3:78:06:
e6:40:b9:b7:6f:53:ae:e6:c5:29:c2:6d:12:7d:6b:9c:9a:ea:
5d:3a:46:cc:4c:2b:b6:df:48:6e:bd:66:a5:38:04:cd:0c:db:
3e:b5:6c:9e:21:1f:0d:ce:0c:62:7b:08:bc:47:6b:5d:75:82:
f6:91:fe:81:23:3f:05:a4:25:24:b8:2b:5b:05:d0:14:a2:3c:
c1:1d:0f:8f:b2:04:06:ed:d0:8e:17:fc:33:97:08:2b:80:c4:
f2:03:b4:e7:86:db:f0:64:e9:8f:60:dd:71:0f:d4:bf:ff:8d:
3f:33:1b:17:67:ad:82:f6:f0:e6:fc:45:ef:ac:5e:93:df:3f:
b0:f9:0b:00:ec:dc:4f:55:97:93:47:b7:b1:d9:02:77:25:b4:
65:5a:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:07:14 2025 by rpki-client