Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa
File: ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa (raw, json)
Hash identifier: zTsM5ABHGS2Ngyz4VN0sm/SII+YEx4u5pjbKiK9jYvM=
Subject key identifier: 48:44:9A:DA:72:77:9A:39:F3:0E:F7:BC:98:02:C8:6C:50:35:2C:5B
Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b
Certificate serial: 010D0C9F432858488AE092A01B9BFD4A0B40B200
Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 199.255.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:92:a0:1b:9b:fd:4a:0b:40:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=22853106-595d-4881-acc5-7767fc79d103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:cc:02:c6:63:ba:29:27:f0:6b:7a:95:5f:
ad:75:3d:45:3c:0e:c2:8c:7f:5d:b2:3a:f9:36:f1:
b8:d6:85:8b:d5:b3:76:57:21:02:02:1d:3a:5f:4f:
f7:0a:c7:30:5d:5d:ff:3b:a7:f1:ea:af:82:9e:c8:
dc:bf:bb:b1:44:2f:3e:8f:65:72:ee:ce:24:e3:7e:
0b:eb:0b:b4:2b:84:7d:88:f6:d1:a7:a2:63:b2:27:
f6:bc:bc:ef:34:a0:b1:b9:2e:4e:59:2f:49:fc:86:
f5:0c:d5:36:53:6f:b7:f2:8d:8a:60:56:c0:70:64:
6c:37:82:8d:37:ff:8c:a5:08:9d:cd:46:6a:03:ea:
3b:28:1d:d9:5d:4a:1a:ee:0a:e3:78:d2:e0:d8:06:
18:9e:f3:82:15:34:84:74:62:1f:02:e7:4b:74:e6:
70:00:38:b1:66:d8:00:bf:9c:4f:62:6d:43:1c:67:
c9:11:05:bb:7f:d8:29:57:64:49:54:97:63:8e:b4:
6e:67:95:e2:c4:bb:8a:f3:31:00:b7:4c:35:b4:3c:
e7:af:1d:5f:27:12:b6:15:89:11:57:fc:05:e4:cc:
97:9d:cc:3f:84:95:2f:f2:b2:9e:e9:7c:c4:34:8e:
35:b6:0f:a5:63:5f:50:7b:95:91:3d:45:8b:7c:5b:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:44:9A:DA:72:77:9A:39:F3:0E:F7:BC:98:02:C8:6C:50:35:2C:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl
X509v3 Authority Key Identifier:
keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:41:4f:d1:a4:54:d3:d3:b1:ec:bc:d0:9e:1f:b2:1a:19:d8:
2b:e9:5e:f7:29:16:99:ab:d4:bc:2e:2c:7a:b0:81:84:cb:ab:
d5:60:0d:fd:ed:97:11:26:a3:76:15:c9:11:c9:fe:bb:a2:3a:
d4:2a:5f:66:71:49:83:c9:b0:f9:05:20:fd:d5:fe:0f:30:63:
8b:c6:10:24:d0:19:f0:c0:14:13:c4:e6:c4:98:4b:e6:5b:94:
bd:a8:ad:cb:d5:4c:72:1d:3d:b6:6d:68:9e:b0:63:a4:12:dc:
f2:0b:35:43:11:20:19:16:8e:58:9e:67:02:4a:c1:ef:34:c8:
91:e6:76:cc:f4:2a:bf:52:f6:85:23:9d:45:3d:2a:60:0f:e3:
67:0c:fc:37:24:7a:92:14:ee:b1:e2:49:f7:fd:96:3b:c7:8b:
e3:67:83:1f:18:39:91:7d:6f:50:31:ef:ca:1c:0a:06:5a:80:
0b:32:63:09:05:8f:dc:d3:a4:b8:16:d4:bf:11:a6:cb:0a:a5:
cb:28:97:75:f8:b3:e5:cd:a9:b5:7e:c1:a0:3e:04:b8:c4:f3:
ea:ac:64:ed:b2:ac:a5:6d:f5:88:16:45:84:be:1e:f8:22:be:
40:ee:67:ad:4f:bb:f5:18:e3:ed:b4:71:7c:1a:7d:c1:32:99:
a3:dd:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:51 2025 by rpki-client