Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa
File: c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa (raw, json)
Hash identifier: L9zCp/6MsgAtiLlET2V3XpmgSodtE1dFVTVrWtYsh2s=
Subject key identifier: B3:A0:F9:1B:A3:37:67:44:F3:66:E4:A5:7F:C1:CB:94:0B:83:DD:A5
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858483F801C172FCA93F0C27FBE68
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 13414
IP address blocks: 199.59.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:1c:17:2f:ca:93:f0:c2:7f:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=c4ab3126-c1f5-4610-ba2b-7eec13c3a83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:b9:d2:11:86:50:00:b9:50:b5:71:40:64:
8c:c3:31:42:b4:7b:b0:dd:19:3d:91:20:e9:54:10:
24:fb:d0:c3:29:66:22:46:e8:88:19:bf:04:f5:f3:
ea:9e:7d:c4:67:26:cb:0c:e4:3f:d6:48:6a:96:7e:
10:fd:26:19:21:01:b4:4e:0f:0c:04:fb:2f:09:c0:
50:1b:47:61:3c:6e:35:0f:80:94:5f:8a:7a:f4:23:
9e:cf:28:bb:d6:39:eb:e0:f8:97:b4:ad:e7:14:23:
9b:3a:d7:a9:2d:c4:41:0a:10:c6:23:18:c7:d3:c6:
40:f5:5c:8c:d0:70:20:05:bd:19:78:d0:93:03:46:
fe:6b:03:6e:a7:04:ff:04:2f:00:0e:82:03:f1:ac:
f9:1d:30:df:26:5e:d6:8b:50:30:93:bf:37:98:c0:
69:b3:d2:82:e6:95:f7:4b:7a:ed:7b:e0:f7:90:1d:
a6:53:4e:3e:5b:32:0d:c6:85:fc:13:be:13:e9:75:
7e:01:22:83:b8:ef:07:a7:8f:01:c5:76:83:0e:f9:
22:96:57:c0:a4:51:b5:11:d8:b2:d6:45:41:8b:d5:
3b:3f:ff:29:2d:1c:52:88:e6:fd:ca:49:68:42:c7:
ca:5c:29:52:1b:ee:a5:f5:3c:c0:2d:12:10:56:6c:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A0:F9:1B:A3:37:67:44:F3:66:E4:A5:7F:C1:CB:94:0B:83:DD:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
199.59.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:d1:15:93:18:3e:79:b1:53:81:0d:9e:e5:1b:bc:e1:9f:68:
84:97:95:31:2b:64:71:79:bf:0f:13:c2:6a:28:79:75:51:4c:
32:d1:4f:56:dc:bf:c7:5c:2a:f6:13:df:c3:44:e8:4f:bf:51:
f2:12:a1:67:a9:5a:c5:a8:f8:fe:d5:cb:34:ab:4c:36:f5:8c:
bd:4d:fb:b4:82:f9:9a:f6:c6:ea:86:8c:ad:4f:01:89:ee:c8:
bc:c7:03:9a:ae:c2:31:a7:4d:b8:43:73:2f:12:a1:ce:46:0d:
fd:3a:d8:c0:03:d4:90:0b:44:3c:0f:fc:be:1c:74:69:17:3d:
34:0b:a9:fe:d1:a5:82:1d:eb:6d:33:7f:97:84:e2:35:61:2c:
e7:87:89:cc:13:a2:f3:09:14:59:02:04:ed:0b:35:82:7f:ae:
88:0f:76:7b:4c:8c:cc:77:7f:c9:31:37:f3:48:44:f7:c3:a9:
a3:e8:2e:5e:85:03:1a:fa:d1:0b:16:d6:de:49:45:38:00:5d:
10:e6:df:43:d9:a2:e4:e3:b1:b1:fe:97:3b:0f:f5:e1:86:b9:
d9:c5:6b:81:1a:a4:1b:56:6e:fc:0d:0c:97:8c:41:11:17:cb:
74:9e:16:51:c7:06:f1:85:d5:76:92:e5:b4:86:1c:b5:34:c4:
a7:fc:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:53 2025 by rpki-client