Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa
File: 3cc8c09c-1655-353c-9029-9838f4886d8f.roa (raw, json)
Hash identifier: MXXsACjvYw0S15aMMa5lEREqfvcV0TRDCAsG4Vf1g3U=
Subject key identifier: 60:DB:C2:2A:D5:E2:C7:E2:76:30:9A:8A:E5:29:76:83:4A:A6:1D:42
Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial: 010D0C9F432858488AE09C9B08FC27D3F8D12400
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 3756
IP address blocks: 199.110.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9c:9b:08:fc:27:d3:f8:d1:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=5a97d28b-e7f0-479f-8f63-b9ced8443904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:4f:7c:fd:65:92:4f:62:b7:f8:10:a2:fb:
f5:d4:6f:ba:ca:5c:9a:ef:20:1e:64:8a:96:af:e7:
04:a1:4e:8d:86:e7:19:de:80:88:72:3a:c8:b7:47:
58:0e:3a:5b:e8:a2:3f:27:96:f3:15:ad:8d:28:95:
cb:18:71:0f:5b:ce:76:14:4f:28:21:c1:9c:c1:ec:
cc:bf:ec:c6:cb:a9:7f:d9:c7:d5:c3:a2:10:8d:06:
3f:17:da:4c:b7:be:05:c1:a4:4d:ff:fc:9e:0f:95:
af:cc:4c:f8:ee:e6:3b:a9:4a:71:25:af:89:29:8c:
be:6b:c8:6c:b8:52:87:09:78:1c:30:42:14:7e:4a:
0d:00:ea:bd:1b:b9:6c:ff:c7:31:5b:16:64:c1:5e:
e4:e3:6a:43:33:7c:a2:02:eb:9d:0d:cc:36:91:7d:
28:ba:29:51:86:ff:93:77:0f:a4:86:c7:40:44:e3:
ef:b5:12:40:a8:dc:95:7a:f4:db:4e:fc:a4:78:8a:
f2:d1:33:a0:14:2d:3c:3f:02:7c:dd:b5:0a:2f:c9:
dc:50:01:1a:5c:98:40:dc:f7:33:12:0a:be:2f:10:
80:c7:31:a9:e3:3c:6d:ea:7d:9f:76:88:1c:55:1e:
81:2b:3d:5d:fa:2e:89:1b:18:1e:d0:5f:61:b1:b5:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DB:C2:2A:D5:E2:C7:E2:76:30:9A:8A:E5:29:76:83:4A:A6:1D:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
X509v3 Authority Key Identifier:
keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.110.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:80:d3:86:09:ce:83:d8:76:2a:90:78:24:44:4d:66:48:1f:
63:5e:f1:8e:1d:da:57:1b:5e:ca:b1:55:46:41:a7:f2:81:c2:
92:22:4d:2f:32:cc:d3:76:1c:cf:96:55:f1:c8:a0:e2:40:25:
09:a8:0c:b0:f5:69:fd:4e:fc:6a:e5:e4:30:ad:1d:9d:66:15:
72:d4:88:2c:90:31:a8:52:7d:46:cb:89:e9:56:5c:9b:83:37:
1d:75:ef:60:17:1e:af:c3:65:8d:20:4e:17:78:57:a7:b6:92:
c3:ce:d0:2c:ed:70:86:3b:34:71:72:8b:7b:2d:49:9d:27:8c:
4a:d0:a2:77:56:b2:2c:36:3a:a8:b7:10:03:21:b9:33:bf:db:
28:4b:04:dc:11:1e:43:1b:7b:80:c7:82:f4:93:fb:0f:4f:13:
b5:8c:8a:74:fd:0c:b0:9c:9b:13:a8:20:66:c0:32:4b:ff:da:
8d:90:66:2a:d6:6c:30:12:6e:42:9d:5e:6c:3a:6a:a2:4b:86:
b9:a8:ce:b3:1e:ff:13:47:10:4e:e0:cf:c7:74:ea:eb:00:a2:
3d:16:bc:31:5b:2f:a8:a3:37:62:d3:dc:e7:d0:a2:fa:e6:5a:
ac:c1:8b:7f:7b:fd:8a:4a:ec:bd:2e:4a:39:9f:b7:e6:c7:5a:
39:50:7c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:45:55 2025 by rpki-client