Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa
File: bc60d7b4-d6be-35cb-80fc-16177325cc06.roa (raw, json)
Hash identifier: 2ktPxuqldcIh7HWGRhq7YjKfLNb567N0I3N/pX1O5M4=
Subject key identifier: B1:83:7C:02:BF:E4:46:4C:68:55:80:F9:E0:9A:92:61:EE:4D:6E:22
Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial: 010D0C9F432858484C102BC1599AF15E1E976000
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 13928
IP address blocks: 199.21.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:2b:c1:59:9a:f1:5e:1e:97:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=cfd65f24-209d-40e0-beb2-2fd66eaa0e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:11:b2:68:31:02:3d:1d:08:99:35:94:24:
9d:3c:7a:bf:9b:c0:63:e1:0b:38:05:39:a4:d1:56:
f2:42:1d:71:38:3e:ce:e0:52:1a:15:a4:d8:26:dd:
62:9f:0b:e5:51:96:52:78:2d:07:b9:7b:07:23:2b:
2b:2a:94:41:02:90:7b:ea:f7:cd:a8:39:e6:de:8e:
65:43:22:27:3a:4b:20:c4:7d:e1:1a:1e:62:08:db:
a6:cd:0f:0d:5e:6d:94:09:a1:25:33:a7:c0:81:b5:
09:21:0f:dd:f0:b1:f2:3e:ee:3b:a9:3a:79:e8:62:
6c:3d:ce:c7:21:9b:41:ea:04:46:3e:81:fa:cc:26:
70:db:9b:b7:4f:96:13:28:83:22:15:78:55:d3:55:
80:15:0b:83:e7:19:cd:db:b8:60:66:4d:93:24:27:
b9:79:d4:32:5f:2e:d0:13:bd:6e:f8:00:cb:1b:96:
49:af:21:b8:69:55:aa:6e:b6:a6:95:04:f2:b9:84:
73:3c:bb:86:af:83:cc:6f:3a:84:fe:35:b4:ab:fc:
c7:e1:22:14:fa:78:56:ce:37:c2:d2:3f:8e:2f:4b:
d9:67:4c:41:a2:40:86:83:0c:41:f9:5e:12:1c:2b:
1f:95:7f:2f:f6:fe:9a:aa:ed:b8:ea:3c:2d:78:16:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:83:7C:02:BF:E4:46:4C:68:55:80:F9:E0:9A:92:61:EE:4D:6E:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
X509v3 Authority Key Identifier:
keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
sbgp-ipAddrBlock: critical
IPv4:
199.21.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:19:de:4f:e8:48:fe:05:bf:4a:c1:35:17:0d:9c:4c:78:bb:
e1:97:8f:5d:e4:6f:5a:af:a7:73:23:6e:42:98:46:2d:e4:1b:
ba:b0:82:96:4d:77:2e:39:d4:97:cf:5a:26:36:26:d7:a4:bc:
46:70:9f:84:35:92:2a:d7:22:43:e8:e8:d7:db:2a:ae:76:3d:
af:a6:46:cb:b0:80:0b:d7:cd:e5:61:45:be:83:06:23:f1:7c:
79:4c:7b:c0:7e:ea:34:5a:60:1d:2f:00:9c:48:35:f6:0d:cb:
60:c6:b3:9b:8d:1a:52:86:ce:34:cd:03:66:3a:ce:02:50:7e:
62:c0:a7:e1:d1:cd:f3:0b:27:3e:9f:58:8a:d3:44:af:49:27:
ec:e8:38:17:c4:99:e5:9e:0c:44:ac:fa:ad:6f:30:d6:a9:4e:
44:22:b5:9f:b2:bb:cd:5a:80:bc:d8:90:84:14:be:79:6e:82:
25:82:48:ee:f4:ca:28:8b:2e:dd:35:2a:21:09:20:36:67:b3:
16:d9:f8:32:fb:4b:a4:86:ff:51:48:11:bf:60:a1:39:60:75:
f0:f3:87:ff:46:ad:86:29:aa:3e:56:99:7d:6d:9a:82:32:41:
07:75:aa:b7:ed:5f:e3:95:79:7e:1a:8a:14:44:98:49:9e:98:
5f:ff:7e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:37:49 2025 by rpki-client