Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa
File: f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa (raw, json)
Hash identifier: CzV1Z1Ehw8lUuHCTko/2WKO1VTemaSwYZsD0GKg/eGg=
Subject key identifier: E2:BE:92:69:EC:5E:20:CC:3B:62:AA:74:80:EA:4A:6F:22:19:66:75
Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial: 010D0C9F432858481C9A954FE7EAAEFDB6C284C0
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 34774
IP address blocks: 199.64.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:95:4f:e7:ea:ae:fd:b6:c2:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=a26210c7-b32c-4d55-93fb-e1af087fd2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e2:fe:bf:ca:03:b9:e5:6e:05:ca:cd:4d:1f:
8e:7a:b1:8d:ab:c2:8f:a5:10:e2:98:b3:0a:b8:3b:
03:60:c4:e3:73:cf:c9:53:78:fc:b5:98:9c:3b:b3:
d2:c0:02:3a:c1:4f:07:41:f1:2a:09:c2:e2:1d:9d:
1a:a5:1c:8a:4f:f9:fc:1f:d5:69:7b:84:e4:c4:61:
7d:85:14:a1:29:a0:a2:62:59:39:93:e2:60:31:b0:
4f:2a:42:c6:58:73:5b:62:34:88:db:f6:f0:f7:5d:
fc:da:75:87:e8:ea:08:7b:ad:8a:b2:66:52:c7:12:
45:76:65:63:4d:43:88:e8:a0:53:20:19:e3:ad:ea:
bd:cc:61:93:51:fa:27:a8:99:52:ed:42:2a:8b:8f:
47:1c:24:f2:11:6e:34:b5:93:79:2a:a6:14:c3:88:
10:59:a2:84:02:d5:40:8f:de:d8:c0:0e:db:e6:9d:
6a:02:a5:65:c7:18:f0:3e:1a:25:36:88:d6:4d:77:
50:53:ac:ec:12:60:22:4c:1c:56:3e:d1:b2:e3:34:
8d:dd:68:94:9b:7e:d6:8b:2d:94:30:79:76:fa:db:
d5:74:81:ec:a8:71:7d:18:77:57:d4:71:1b:64:ef:
d6:a6:56:33:ab:1d:0b:dc:31:d9:2a:27:86:53:4e:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BE:92:69:EC:5E:20:CC:3B:62:AA:74:80:EA:4A:6F:22:19:66:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
X509v3 Authority Key Identifier:
keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.64.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:f7:c7:21:d8:b0:a6:fc:06:b6:38:85:4a:6f:ce:3d:2e:77:
bd:33:1e:54:5e:4e:27:b9:ba:29:10:44:91:9d:8e:87:f2:45:
1a:3d:60:0a:4a:2a:9a:ba:a6:85:07:ac:66:f8:9e:a7:56:93:
f9:0c:ba:d3:36:ba:a6:e7:45:2b:26:5e:fd:1b:fd:83:ac:d4:
2a:90:1b:39:c3:71:14:f1:2d:0a:da:a6:51:2b:25:1a:c1:8c:
23:eb:db:2b:a0:34:e1:41:7f:bb:7c:09:8b:51:c1:d0:24:0b:
72:f3:40:73:d6:7a:ef:18:bd:27:c3:95:f5:4b:0c:b9:62:23:
e1:83:93:0f:3e:a2:0b:54:bd:5a:0d:c1:b4:4d:ea:ef:91:26:
13:7b:6b:04:86:e8:3a:2e:5f:72:a8:95:b0:d2:bb:03:2a:8d:
a4:ca:1c:55:e2:ad:2e:74:d3:7b:26:d4:11:29:d0:5f:39:de:
e2:94:f6:4a:4e:9f:96:25:dc:62:d5:10:80:a8:0d:03:e5:7e:
f0:af:51:d3:a5:5a:bd:7f:1a:25:d3:d5:cb:79:92:41:5c:61:
4d:dd:87:bf:7b:69:dc:a0:56:0c:71:e4:c4:cc:ce:68:b3:9e:
e4:5d:75:99:6c:fd:2f:e3:6a:07:00:61:29:40:58:81:01:f3:
d1:1f:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:36:53 2025 by rpki-client