Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2ee7616c-2152-3948-83e3-bfdb2dd74b48.roa
File: 2ee7616c-2152-3948-83e3-bfdb2dd74b48.roa (raw, json)
Hash identifier: N2CBaIo61OMKM4eEihJCbnRGzAbHYmFecONrKC2uuVA=
Subject key identifier: C9:5D:2A:54:9D:43:2E:44:4A:07:FC:12:B9:B7:41:59:1E:3C:74:1B
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584863CB098C0543F081F7D07100
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2ee7616c-2152-3948-83e3-bfdb2dd74b48.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 13414
IP address blocks: 199.96.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:09:8c:05:43:f0:81:f7:d0:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=068dbaa1-ddd2-49f2-8eec-58581c22935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:15:54:ea:e2:76:25:a2:b0:d2:b8:f8:2d:
97:43:73:fb:c9:d5:3b:f5:92:c1:14:f7:fc:5b:c9:
d2:55:52:4f:8a:a2:ba:91:0e:14:dc:8e:5c:8e:f9:
f2:71:97:0a:ef:f3:87:0a:cc:cd:2a:33:56:8d:91:
68:a7:a6:23:2f:a2:57:6c:73:39:8e:6c:9f:c9:e2:
1b:48:42:7d:51:6c:09:d0:06:58:5b:5a:e7:b0:7a:
ab:e3:6f:dc:42:0f:d7:5b:90:0b:bc:24:d9:35:66:
b9:6e:7d:73:ea:20:d6:25:dd:65:80:c4:66:7a:f5:
1b:86:7f:62:0c:90:1e:50:ff:d1:50:9d:25:54:83:
75:c4:e8:0b:5f:79:2d:36:90:41:52:f0:62:c1:0d:
0f:19:a5:29:87:2e:63:0f:81:8f:96:a2:2a:3e:29:
45:f5:9b:26:99:b2:e7:4b:0f:29:5f:84:7e:73:d9:
a2:5f:44:22:ce:8b:22:6c:7f:c7:83:e8:46:2e:30:
0d:9c:69:ce:4f:85:17:be:7c:9c:9a:2c:a9:95:a0:
2d:e9:c1:45:a0:23:34:a9:9a:31:ea:0f:60:f9:b9:
44:6d:fe:c8:7b:42:42:78:27:82:15:b5:c9:dc:a0:
95:fa:2f:2c:cb:4c:b2:86:83:1b:b4:44:11:fa:6d:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5D:2A:54:9D:43:2E:44:4A:07:FC:12:B9:B7:41:59:1E:3C:74:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2ee7616c-2152-3948-83e3-bfdb2dd74b48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:fd:5a:2c:31:3e:85:58:56:93:e0:73:3d:98:f1:0b:fe:27:
06:f8:d2:da:6f:f6:51:3b:77:59:89:92:ba:d9:f3:9a:f3:de:
bb:a0:e6:6a:75:f2:6b:8e:0d:02:d0:56:d7:90:ff:04:f2:b9:
fa:a5:11:11:82:94:17:b0:ac:ef:3c:5b:d0:b3:f7:1a:11:15:
46:69:f2:2a:9b:cf:6a:96:d1:17:0e:87:92:79:04:88:48:af:
a1:a8:d6:d2:8c:88:b5:46:30:92:82:7c:6d:6d:46:4a:b2:95:
a3:91:d9:a2:43:aa:8f:69:53:e4:b9:53:12:be:02:58:d7:ee:
10:70:e5:48:f1:ab:8f:55:2e:cf:eb:fb:a6:59:76:b9:7b:c5:
ea:71:91:ab:37:96:6e:57:c6:d4:88:9f:af:b4:2a:f2:7c:c7:
6d:4f:08:00:16:8c:f7:8f:ab:83:f7:bf:7f:8b:2f:0f:10:81:
fa:a0:f9:c5:56:5a:6f:37:c1:07:7a:b0:eb:fd:22:fd:af:18:
4f:5a:f8:44:cc:4a:f8:d4:a9:2a:76:68:3a:70:8d:9c:4e:24:
d4:ce:5f:40:e7:99:b2:60:c4:7f:7f:6b:db:d5:d1:25:7c:6e:
18:f6:43:16:0b:5b:9e:40:cc:93:d8:f4:10:c4:ed:0c:76:25:
c5:d0:9d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:32:33 2025 by rpki-client