Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa
File: aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa (raw, json)
Hash identifier: N2S2gFNo3Hkh6DFg+fVmSMIXrWQ/Y3AtHwdUbNW1A8o=
Subject key identifier: 42:E6:A5:20:D5:54:3E:2E:80:05:F9:27:09:D2:4D:8C:F2:ED:6E:E3
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F43285847E78F5C88428F32064962BF40
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa
Signing time: Sun 17 Nov 2024 02:00:28 +0000
ROA not before: Sun 17 Nov 2024 02:00:28 +0000
ROA not after: Sat 15 Feb 2025 02:00:28 +0000
asID: 8075
IP address blocks: 199.0.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e7:8f:5c:88:42:8f:32:06:49:62:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Nov 17 02:00:28 2024 GMT
Not After : Feb 15 02:00:28 2025 GMT
Subject: CN=eb46b177-23b5-4097-8a5d-eca481fe2be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:aa:84:f1:aa:ae:4a:cb:c8:e9:ed:f9:2e:
a0:b2:59:4c:01:0d:6b:12:dc:6a:21:e2:35:b4:88:
87:fc:71:3b:de:1d:90:da:89:96:ef:e8:77:fc:85:
b1:54:35:c1:5b:a1:21:d7:3b:6b:0c:bd:78:7d:eb:
89:09:8f:22:40:4f:9f:9a:cd:4e:71:a6:b2:ad:9e:
22:a1:10:3d:24:81:4a:53:b3:53:4c:7d:c1:d4:ee:
eb:6d:a4:89:c2:58:f7:5e:33:03:c5:ab:a5:fb:fc:
a9:4d:25:c6:82:58:e1:22:16:56:7d:15:25:8e:9f:
d4:23:98:6f:c7:f0:53:6e:44:57:72:e3:03:08:46:
a3:b3:32:87:32:cf:f9:d1:17:b5:4b:c1:58:70:96:
87:9f:3e:14:d3:79:fb:6b:87:3f:f4:85:4a:57:fe:
18:a9:a9:4c:3d:a3:54:22:10:95:b3:45:06:2b:45:
6f:0f:28:19:2b:f7:45:4d:b6:e7:0c:c6:ec:00:23:
d0:db:12:10:49:9a:6e:ae:87:6b:ce:57:d7:59:3e:
d3:58:45:bd:ea:89:4f:f8:9e:2b:44:8d:35:8c:a0:
9e:c9:d4:96:c3:6b:e2:70:de:25:9b:dc:35:1a:27:
88:65:22:62:e5:fd:36:1c:3b:d0:15:b2:1a:39:4b:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:A5:20:D5:54:3E:2E:80:05:F9:27:09:D2:4D:8C:F2:ED:6E:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.0.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:5b:05:80:0f:c2:1b:cf:89:bf:01:3c:cc:11:45:5c:00:03:
e4:e1:bf:fa:e9:b5:fd:cc:72:f6:ef:4f:75:d7:ca:84:5e:cb:
b7:76:90:4c:6d:58:ae:93:f8:db:e5:7e:b1:eb:fb:95:bb:e1:
be:f0:ed:94:29:3d:a0:5f:25:ad:4e:bd:65:ea:0c:68:96:a5:
57:cd:1b:9c:49:c0:52:ee:6f:24:f6:b2:10:6f:42:b7:54:77:
4e:2a:f8:2f:aa:64:7a:ab:b7:12:a6:68:db:3b:db:a2:c1:12:
32:c4:d8:36:ee:8b:c7:8e:ba:c9:c0:7a:e0:63:ae:43:8f:5c:
e9:73:c3:2b:18:48:30:c9:fa:07:06:78:a1:fe:7e:1e:5f:6a:
7e:0e:35:3d:18:5c:2f:3e:86:04:dd:3e:c5:a2:ec:5b:7d:d1:
f8:d3:06:f7:02:8a:46:5b:2d:e4:eb:08:b7:5a:87:48:6c:e9:
98:db:bf:af:a7:2f:36:c4:04:a5:8c:6c:fe:e7:8e:ff:a8:78:
79:fd:61:05:4a:ad:9b:8c:3c:31:47:de:38:51:a8:e4:4f:0b:
6e:2d:3e:7b:8f:0e:cc:8a:5d:22:7b:b4:a1:9e:b1:8f:9e:9b:
92:1b:9f:9f:43:cb:92:91:7c:2a:75:d8:a1:01:25:ce:b6:33:
43:53:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:57 2025 by rpki-client