Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa
File: e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa (raw, json)
Hash identifier: kBf4ZB88FkJLw3EUXaSY8z9pTWFC3wo+mvSieBavpo0=
Subject key identifier: 7F:9D:C0:BD:B5:29:D1:B5:AA:07:83:3D:9F:86:78:C2:34:4C:A1:8B
Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial: 010D0C9F43285848854B43A0509303D6B7B45780
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 5719
IP address blocks: 199.109.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:43:a0:50:93:03:d6:b7:b4:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=baeffc50-2fd9-45e2-a090-90b9bc3cbcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:82:bf:c2:05:e1:09:d9:be:9f:3b:5d:da:
c4:77:e3:a0:e0:d5:03:c4:1b:32:c4:86:30:cf:24:
85:dd:3b:b2:40:77:5a:10:53:c2:3a:e5:c9:fc:78:
e4:b7:91:bd:90:4a:f3:21:0c:41:59:c6:5b:b9:ce:
16:c1:b0:0e:3a:93:8f:6f:60:92:0a:93:e6:2d:38:
89:e0:e1:ab:9f:43:14:1c:0e:4b:99:85:95:20:e2:
9b:07:99:89:f6:3b:1d:32:b2:4c:37:13:51:4b:61:
2a:a7:07:9c:8b:46:e9:db:0c:f4:d4:0d:0a:66:bd:
d3:18:38:f9:8c:9c:2f:b2:de:16:d5:35:ec:89:ff:
e3:81:88:ca:4b:a8:e9:5a:e9:57:aa:ad:a2:b5:57:
45:79:86:ef:04:9e:c8:d1:e2:5f:ce:20:07:63:a2:
c6:b2:34:d7:e8:91:6b:33:f0:4b:bc:4b:7d:10:a4:
65:a2:06:e1:a2:c1:20:47:73:77:9e:07:0a:e7:24:
78:3f:bc:87:12:73:7f:6e:fe:44:15:ac:73:4e:1d:
f5:92:da:1d:4f:8d:5a:05:3c:17:0d:51:43:af:31:
2d:ae:18:76:b6:db:68:6e:fe:99:0a:2a:39:c2:46:
24:78:4c:a5:a2:2b:ab:4b:19:1c:c3:db:4c:75:13:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9D:C0:BD:B5:29:D1:B5:AA:07:83:3D:9F:86:78:C2:34:4C:A1:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
X509v3 Authority Key Identifier:
keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.109.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:79:fc:ea:32:fd:f2:63:2c:61:a2:f7:62:b0:cd:9a:c1:e3:
90:7d:4b:e0:19:cb:b1:6f:8a:69:61:fc:f2:f6:7c:3a:65:38:
69:0c:0d:98:0b:61:d6:60:d1:cb:6d:f1:73:37:2a:fe:83:7d:
3f:6a:0c:8b:d0:d4:5a:77:2e:65:f0:18:f5:aa:a7:d7:90:f1:
d5:a7:2e:58:e3:ef:7c:82:34:9e:38:31:b9:61:63:08:a9:29:
bf:68:19:02:af:3a:13:cf:8d:36:91:a4:cc:1c:d6:c4:e0:ba:
29:46:ec:d4:24:42:bc:57:64:e0:e7:da:96:cb:23:cf:2d:cc:
59:28:2c:cb:dd:53:6c:77:71:ad:35:c1:4a:a3:9d:5f:68:f2:
91:fa:13:9a:37:b4:0c:f2:17:39:68:66:d5:74:32:6d:b6:7f:
06:b7:49:81:3b:2d:d9:e1:4e:0b:1d:e5:d7:bc:69:7d:e3:b2:
1d:44:56:07:c3:a2:af:be:5e:19:bb:d0:f8:cb:f8:f3:af:ea:
37:d9:20:57:16:ff:69:ef:f9:6b:47:f7:dc:3e:c4:c1:54:e7:
f5:ed:ef:12:7c:88:7c:09:af:c6:ed:88:26:b4:bd:98:38:84:
9b:a1:34:85:4f:68:a9:e3:67:13:5d:88:00:c6:fc:86:a9:c0:
93:8e:8a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:44:04 2025 by rpki-client