Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa
File: c4d7f5be-73c8-302a-991e-a5952ac26f26.roa (raw, json)
Hash identifier: JfFjvnnexz7TRbvNyBzQTvl+6Onikq9aX+hQqUPRq78=
Subject key identifier: 76:16:31:BD:D2:01:D7:1C:EC:42:2B:33:34:B3:E5:86:F2:DF:55:97
Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial: 010D0C9F43285848854B425F64632D1ABD11BD00
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 3754
IP address blocks: 199.109.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:42:5f:64:63:2d:1a:bd:11:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=d71b0834-9beb-484f-a2b9-7ecf594f58a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:d7:67:de:3a:f0:b9:5b:b4:da:2a:e3:1b:
d7:c3:ab:83:c4:d6:fd:d6:63:25:d8:59:31:af:a8:
fe:86:78:b9:a7:26:4c:c7:a8:79:be:07:d9:e6:ad:
a8:e8:72:d0:3f:a0:24:ac:99:57:4c:17:23:5b:2d:
c8:1f:89:99:26:09:d2:bc:2a:12:27:08:5e:ea:0e:
2e:ec:19:49:67:86:5d:1f:d3:c7:98:a1:e9:31:d7:
77:e8:ed:a3:15:0f:5f:21:01:96:e0:87:43:64:fd:
a0:e9:fe:66:b7:c4:98:12:5d:6e:4c:a5:4c:2e:b5:
de:ee:06:c0:8b:f2:38:fe:12:95:8a:63:af:6a:1b:
d3:f2:28:9c:4a:3a:6f:7e:0f:42:57:80:b2:33:5f:
7f:d6:72:41:ba:fc:08:40:00:2d:71:f9:df:dc:98:
f8:ad:be:d9:ed:20:83:f6:4a:da:7e:5b:5a:24:72:
87:7d:3a:68:13:eb:92:97:d3:3b:96:32:5f:66:01:
ed:ea:ef:dd:21:13:01:40:6a:99:ba:23:b9:19:40:
87:a5:b7:59:0e:0c:b4:31:1c:a1:0b:d5:9b:66:6d:
e3:86:35:24:31:9c:dc:5d:c8:f6:f7:65:cd:aa:23:
0b:51:51:22:61:e5:6b:df:cd:10:fa:04:eb:c6:a7:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:16:31:BD:D2:01:D7:1C:EC:42:2B:33:34:B3:E5:86:F2:DF:55:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
X509v3 Authority Key Identifier:
keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.109.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:69:7b:ef:9b:b3:a1:98:a2:25:61:81:af:5e:68:d9:e8:9e:
54:11:4d:79:29:7f:b3:5d:1c:bb:45:c8:bf:a4:96:b5:89:2b:
af:71:f9:be:2e:63:6f:8c:22:21:fb:3c:ee:0f:dd:22:66:78:
95:8a:f6:47:0b:f1:bf:51:cc:38:6d:6b:aa:3a:3f:b8:0e:ea:
6e:7e:ed:58:b4:6d:ea:c6:d4:ae:49:0e:7a:5a:93:df:22:d7:
d5:b2:88:a2:e9:41:21:02:d6:ad:3e:ae:04:80:75:c9:19:f2:
bd:ca:f5:c3:b4:e8:36:90:1f:85:3b:b2:73:41:a4:de:a4:5e:
43:4c:70:f5:1a:06:e8:7b:13:fe:14:6f:c5:0d:7c:7f:f3:22:
61:e0:86:38:98:c9:6b:fb:a3:9f:04:37:c2:39:24:f7:fb:e2:
f7:35:0f:9c:4f:7e:31:ce:af:f7:d9:d3:08:c7:22:83:45:e3:
60:3d:5e:96:63:c7:9d:29:07:11:b5:0a:9e:1f:d4:39:14:c4:
7d:5b:2f:98:3d:c2:d1:23:f7:db:dd:34:99:5c:0f:73:8b:7b:
d9:09:1a:d0:43:c5:a5:bf:3c:0b:36:45:b6:8d:34:bb:ce:a2:
7c:08:88:db:9f:96:29:ac:cc:36:21:7a:14:73:88:20:41:42:
b3:dd:24:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:47:21 2025 by rpki-client