Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa
File: e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa (raw, json)
Hash identifier: 9TUVq4whGYKpdrEl25Gvk557Jijdn/9FVZ4rS8mgliI=
Subject key identifier: 07:84:76:76:71:05:48:92:A5:FE:B4:86:C3:10:BA:3B:F0:E0:98:58
Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial: 010D0C9F43285848854B497C4D7CC8F4E7C6CE80
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 3756
IP address blocks: 199.109.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:49:7c:4d:7c:c8:f4:e7:c6:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=3fe46fa0-5b56-4c78-9a6e-3fe141e2914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:2b:56:77:c9:9d:79:8d:22:38:00:e8:0b:
6f:88:50:eb:a9:e2:a9:76:f9:da:50:bb:7e:5d:5e:
62:1e:38:31:4e:e2:59:52:71:93:f5:17:7b:3d:a2:
5c:8e:6c:47:43:19:4e:2c:4a:f6:53:58:87:f6:ed:
5a:db:fc:c9:37:95:f5:f2:a8:6d:9b:98:4f:33:ef:
9e:5c:fc:53:7c:fb:03:c0:ea:00:6f:8c:30:c4:8e:
b7:0b:27:fb:8e:9d:67:27:4b:0a:15:3f:fe:89:dd:
73:9f:57:e8:a1:91:7a:4b:03:27:9e:72:0b:ca:7c:
0c:22:ad:93:ba:b3:e9:fe:bb:eb:b5:59:83:f6:3c:
e7:f9:0b:ec:bf:3c:49:bc:92:c2:51:37:00:6c:c0:
e3:c0:87:54:e9:b4:1f:35:c0:a3:32:25:7a:3b:5d:
3d:7e:3b:28:89:c6:4b:86:52:34:49:8b:d9:67:a3:
72:7e:f5:93:9c:32:96:81:39:1e:61:a5:a4:74:74:
bf:71:e6:2f:cf:c7:2c:6d:5b:c3:bd:97:af:91:67:
23:ec:40:a8:11:6e:9f:d4:1d:b9:a0:d9:ea:4a:3c:
d5:31:52:d8:82:11:20:4c:1b:f9:19:82:9f:5e:bc:
e3:4f:a5:2c:70:ff:33:ff:0d:46:23:80:a5:34:fa:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:84:76:76:71:05:48:92:A5:FE:B4:86:C3:10:BA:3B:F0:E0:98:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
X509v3 Authority Key Identifier:
keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.109.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:f8:b0:18:0e:8d:0a:8e:90:f8:14:19:5d:fe:a0:03:b0:55:
74:51:34:b7:63:78:9f:56:64:f2:bc:6b:c4:2f:e9:b8:6d:6c:
ea:0b:c3:2f:b5:57:a9:d3:dc:70:6e:78:9d:f2:3c:f7:d0:a3:
b4:19:13:5a:06:04:c1:2f:68:33:c2:09:b3:a2:78:a0:bd:01:
e4:d5:fa:68:27:c4:f6:4b:af:52:f1:32:e5:1c:65:09:ee:30:
be:73:ff:5e:26:de:1d:30:a1:64:cd:0c:80:2a:21:14:40:e6:
fe:b6:6f:97:f5:b6:95:a7:d9:29:29:58:0b:03:34:de:d3:56:
63:c4:34:cd:b3:26:e6:17:38:36:12:47:19:52:46:7c:50:06:
8c:8f:8b:35:5a:37:2a:bc:46:c7:85:ed:b7:3c:e8:8a:8a:30:
52:aa:80:b5:8c:5e:e9:51:6a:02:73:e8:c5:43:a7:32:d8:f8:
3a:43:8c:fa:f0:18:cc:8d:b5:02:ca:45:8b:3e:4d:31:6c:6b:
81:98:1d:fc:07:f8:b9:5b:47:2c:66:f9:8c:73:d2:3a:8c:7f:
80:84:77:4a:3c:c4:68:4f:41:39:1d:5d:58:7b:36:73:80:9b:
cc:f1:82:3a:77:5a:cb:69:30:74:a6:62:1d:1e:be:4f:d0:d1:
87:ba:7a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:28:29 2025 by rpki-client