Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
File: c5885067-49f4-3a7f-bf2e-4f3c31808739.roa (raw, json)
Hash identifier: ahA8BIR8ltnp8qFPLhhwlv+E6Y30gznBD9zSS0bRmzI=
Subject key identifier: 32:23:E8:95:D2:0A:4F:0A:28:34:00:7A:6F:34:4C:C4:68:A8:A5:15
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F432858480A751E72D79B9E8C28823680
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
Signing time: Fri 29 Nov 2024 14:00:51 +0000
ROA not before: Fri 29 Nov 2024 14:00:51 +0000
ROA not after: Thu 27 Feb 2025 14:00:51 +0000
asID: 25899
IP address blocks: 199.182.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:75:1e:72:d7:9b:9e:8c:28:82:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Nov 29 14:00:51 2024 GMT
Not After : Feb 27 14:00:51 2025 GMT
Subject: CN=b7dbba44-321e-47c4-9861-2f372fce40b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2a:b9:7a:12:90:ab:28:c4:fc:be:e4:4f:53:
6d:6d:f9:51:1e:70:d8:dd:1f:74:e0:91:16:05:b2:
42:8c:83:4c:50:64:82:69:77:0d:09:22:63:ce:e2:
0b:dc:61:af:9d:4d:0f:1f:b5:8f:7b:7a:91:ea:70:
8e:7e:e0:97:90:a1:2e:6c:40:ce:59:86:17:a1:9c:
75:19:f5:af:f3:be:38:b7:a6:c1:e7:ee:75:48:c7:
40:c2:a0:40:c7:f2:3a:8c:e8:ef:08:5a:ff:e9:cf:
2e:71:90:17:ae:35:c2:be:f2:57:7e:4a:b1:09:68:
b9:b9:5c:4a:54:c4:a7:62:b8:bc:18:25:b9:26:7a:
33:b8:3d:56:d9:80:9a:9c:fc:20:a7:1c:ed:97:c2:
11:9f:49:45:bf:88:88:71:ea:5d:37:39:14:cc:79:
7f:15:7d:c9:bf:3b:52:40:f2:e2:bb:ff:13:38:94:
0b:2a:8a:a7:e7:4f:e0:42:71:b9:5b:73:95:0c:09:
1e:88:41:dc:c4:bb:32:d5:b0:7e:1f:3c:de:ea:7b:
50:87:20:d3:c9:b4:19:f1:bb:6d:21:10:f5:d7:27:
69:7a:96:1d:36:92:40:96:8b:05:1d:eb:f4:6e:d0:
09:fe:ad:63:cb:7d:c4:34:bc:d4:23:56:ab:11:bb:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:23:E8:95:D2:0A:4F:0A:28:34:00:7A:6F:34:4C:C4:68:A8:A5:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
199.182.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:52:79:5d:6c:09:1a:30:42:75:ea:38:db:df:78:0e:f8:77:
64:50:87:e2:28:6f:7e:35:1b:4a:6f:38:ab:ab:0d:d5:5d:8f:
5d:26:f4:2d:3b:58:fd:96:67:ab:c1:f0:6a:82:26:7f:96:bc:
7f:87:25:3a:99:3e:72:07:d7:05:b5:c4:06:43:fb:6e:0c:52:
fe:4d:2c:81:1e:ca:94:b2:27:7e:e4:62:3c:bf:ce:46:75:9e:
56:d1:01:9d:1f:89:54:ea:61:90:c4:cd:bd:1d:64:cb:00:20:
e6:ad:f8:8c:f0:41:5c:f3:d6:67:9e:d0:63:3d:7a:cc:0c:c0:
f9:bf:9e:e1:23:d1:18:f1:8f:f5:27:be:dc:4c:08:6b:2a:5c:
86:f6:f8:e2:2a:c0:b7:60:2b:ae:ee:ba:cb:ad:21:df:ca:6b:
ac:3a:a6:41:3f:30:f0:7a:02:3b:b9:cb:ee:e9:05:ef:82:7a:
06:6a:0d:3a:c0:f8:b4:70:a7:18:d1:84:1d:ce:8f:49:26:48:
12:42:09:b5:37:a0:37:a0:f7:0a:84:64:d3:c2:96:6c:95:e5:
25:8c:ed:06:ab:22:05:63:7d:0a:b5:d4:f5:5e:21:77:f3:d6:
3e:84:79:fc:1d:a4:5e:08:2b:d2:fa:ef:1c:3a:28:bc:94:e4:
7e:f5:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:00:17 2025 by rpki-client