Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa
File: 6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa (raw, json)
Hash identifier: BDZ27yZmxfiP2/7wYR/B2EXUargmiLrwXcibRz/MSyE=
Subject key identifier: 4A:9D:48:67:86:F6:92:01:65:9F:5D:6C:9C:CA:07:CE:E7:7B:04:78
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858483F801BE66E8ED5361E153B80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 13414
IP address blocks: 199.59.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:1b:e6:6e:8e:d5:36:1e:15:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=72ecc048-3900-4d84-8980-5449eb906078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:d7:14:c7:05:db:5f:00:fe:4a:9e:76:9b:
10:ee:20:0c:a1:51:8b:1d:5a:cc:68:30:54:34:52:
41:0f:9c:6b:31:10:c6:b4:da:cf:ef:f7:60:6f:01:
4a:f2:5f:90:62:a4:9e:c6:ae:bc:4e:a6:47:39:c2:
4c:d6:79:73:fe:28:d3:44:c1:77:37:bc:66:e1:eb:
1c:89:c0:1e:1d:5c:cb:2b:24:3b:f6:2f:79:40:0f:
17:b3:9c:d5:00:b5:b6:45:a2:ff:32:8a:56:4b:21:
8b:c9:6d:1a:84:61:7b:4a:4c:4a:19:ac:0a:2e:41:
37:71:0a:d6:1f:ba:cd:4c:e3:4a:b7:14:80:16:f4:
52:8a:82:2e:68:fc:32:bd:d5:71:67:dd:71:9f:0d:
87:fa:7a:52:12:5f:1a:ca:16:24:04:0b:d7:5d:f1:
aa:72:19:5e:8a:99:8c:03:70:ab:14:2b:3f:db:2c:
27:e4:d2:86:48:af:c5:d7:79:e6:61:c6:2f:c4:0f:
ba:ee:4c:01:37:b4:32:56:c9:cc:44:d9:d8:70:d5:
16:22:ca:12:36:fb:30:7d:22:76:fa:a6:d1:41:08:
af:ba:90:bb:0b:63:f1:15:47:d6:c0:21:d4:8e:3e:
f7:1a:fa:82:bd:4e:fa:cc:4b:19:6c:17:15:b3:e3:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9D:48:67:86:F6:92:01:65:9F:5D:6C:9C:CA:07:CE:E7:7B:04:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
199.59.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:5f:c1:1b:16:b6:23:41:2f:9e:98:a9:7a:7a:8c:b2:ac:3d:
1a:8f:c3:c4:77:d0:cf:33:27:0a:b0:cb:fd:a7:d9:3e:1e:f9:
48:8b:44:7a:e9:4b:9c:e9:b4:a4:db:bb:20:8e:d5:d7:e7:cc:
30:38:d8:39:62:cc:5e:96:8d:3b:73:1b:ee:10:28:f1:3e:3a:
4f:01:b2:39:06:6d:2a:f6:15:1c:41:9c:e7:df:5e:29:64:7d:
f2:7c:2f:ba:79:2d:2c:dd:bd:ac:35:2f:c0:51:c2:b0:7f:70:
4c:ef:92:45:d2:c9:ef:d0:55:02:89:99:cb:59:e5:b7:6b:e5:
05:f9:73:1f:c5:eb:63:1f:4d:b6:01:c2:44:4c:3b:74:bb:f7:
a5:79:d7:a9:72:95:e2:e6:e5:97:63:1c:8c:1e:d8:d0:c1:2c:
e4:af:12:50:89:ab:93:68:c9:47:0d:01:93:3f:ca:e8:85:6c:
3a:96:e9:2b:0a:74:ea:6d:6a:1d:75:7b:b4:07:99:6f:59:f2:
a6:a4:f2:72:be:e8:3a:40:be:8a:37:f6:3f:ce:cf:3c:60:f5:
6d:10:3d:7c:65:0d:52:b4:eb:a6:d8:88:25:08:51:31:ad:b2:
5e:96:96:85:ad:1b:ae:43:67:63:9c:8c:57:f7:b6:ba:59:2c:
75:90:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:41 2025 by rpki-client