Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa
File: 9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa (raw, json)
Hash identifier: /kzTp3xgqiJerOwcE2DukrHjNnMk1922juMPfceLb5A=
Subject key identifier: F1:F7:57:02:FC:17:79:2A:01:79:B6:39:81:98:12:1A:36:DD:CC:3C
Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial: 010D0C9F4328584851A574D948AF0EAA5B10D880
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 34774
IP address blocks: 199.64.40.0/24 maxlen: 24
199.64.72.0/24 maxlen: 24
199.64.73.0/24 maxlen: 24
199.64.74.0/24 maxlen: 24
199.64.75.0/24 maxlen: 24
199.64.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:74:d9:48:af:0e:aa:5b:10:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=f1320e54-814a-4186-a3d0-d5415b7976e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:43:0b:79:f7:85:22:a7:09:3c:55:04:b3:
ba:15:09:a5:9e:d1:7d:ca:4a:64:6e:80:07:e8:d2:
a2:a6:cf:fb:3c:5e:86:c2:39:6a:fa:c1:18:3e:5e:
3a:8f:7b:e2:00:ac:d8:81:11:f5:57:e6:46:13:40:
55:32:17:75:71:36:47:f6:e1:32:d2:92:91:38:b5:
79:0a:7b:12:66:7b:79:64:e4:f6:0d:49:13:1c:22:
f8:e9:66:5f:d8:0d:c8:99:be:4f:67:e3:6f:1b:c7:
ac:c5:e6:0a:c5:63:21:2d:2c:ad:0c:0c:16:7d:f5:
09:e3:80:ad:7a:5e:a1:1c:2f:4e:d0:79:3c:ba:7e:
00:35:53:ed:2f:25:01:23:a4:7d:bf:1b:99:ac:8e:
3e:e8:84:e7:51:43:7b:3b:af:62:47:3e:1c:8a:ba:
73:21:61:1e:40:9c:af:42:a2:ac:be:30:72:d6:5c:
33:cb:25:88:3a:32:5d:16:20:00:e9:df:26:4d:3e:
f9:86:a1:14:d2:bd:2a:16:72:83:1e:36:97:64:fe:
3a:3b:03:0c:56:75:86:62:84:19:64:28:d9:03:fe:
15:76:4c:2b:82:59:e4:b5:08:48:f8:10:ff:f9:89:
6f:dc:02:d4:35:cf:cd:04:b2:7e:92:38:c2:5e:33:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:57:02:FC:17:79:2A:01:79:B6:39:81:98:12:1A:36:DD:CC:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
X509v3 Authority Key Identifier:
keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.64.40.0/24
199.64.72.0/22
199.64.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:37:25:da:5c:98:4c:59:15:b1:75:66:94:dd:9a:6f:80:b8:
dd:c2:78:ab:72:cf:be:c4:c9:28:dc:55:2a:34:33:85:e6:06:
c9:ac:70:14:1a:32:b1:7a:36:1e:dc:c9:d2:39:77:0b:ff:50:
bb:b3:71:4a:31:e6:25:54:00:df:d9:7f:57:1b:61:00:b5:3b:
24:4a:70:89:ef:ca:4e:79:6d:f5:29:89:0d:c9:8b:91:e1:ea:
cd:e5:5b:bb:a9:e0:ce:3d:42:60:e3:99:49:4c:06:de:ff:d1:
11:38:bc:ad:2d:50:6f:03:80:9b:96:28:8b:20:83:e1:1c:62:
12:e2:b6:d1:04:f2:35:a2:91:09:90:27:ad:0a:d5:21:8b:36:
da:34:78:42:13:85:27:d4:7c:f3:4b:25:df:fc:a4:9c:25:97:
a8:85:7d:04:23:0f:1e:7f:98:22:8f:69:dc:bd:38:4b:78:d5:
a1:b4:10:f4:19:9e:81:7d:f9:43:2f:c0:64:6e:60:ea:87:7c:
f7:7b:82:18:9b:75:49:70:ad:fd:6e:2c:a0:35:00:3b:9d:14:
46:e2:c9:1d:b3:9b:df:9c:73:59:98:83:00:34:49:d0:d0:17:
a8:e7:ed:31:af:5f:05:c5:26:3a:77:52:a9:5c:be:5f:ef:b1:
4d:88:27:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:42 2025 by rpki-client