Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7019c381-83a9-317f-a439-01508df742b3.roa
File: 7019c381-83a9-317f-a439-01508df742b3.roa (raw, json)
Hash identifier: cVxNTx1zl6hbanet9zgJwdQx+qTb7Zd+ssf7hikPxrg=
Subject key identifier: 7C:76:50:58:00:7E:E5:2B:5C:0D:9A:31:CE:22:F2:DD:4A:DB:5E:27
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F4328584834557BEBE4392DD3034CCF80
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7019c381-83a9-317f-a439-01508df742b3.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 22925
IP address blocks: 199.230.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:7b:eb:e4:39:2d:d3:03:4c:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=ee4f9c2a-8593-4841-b1fe-3f90606e35f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:ef:cc:bd:43:29:cc:bb:16:a2:f7:9a:7c:
05:9f:94:a0:4f:c0:eb:09:97:cd:98:04:eb:85:92:
50:2c:31:b8:7f:ac:e4:c5:12:57:a9:24:a7:4f:4a:
0a:65:fe:76:6e:f4:16:81:39:44:b5:76:0e:50:0c:
6b:06:15:13:4e:4c:cf:62:48:85:68:f3:ed:cd:8a:
f4:22:19:44:e8:cf:57:35:19:1a:d2:57:f5:49:6d:
8c:fa:bd:8f:48:1a:34:bf:0a:cb:27:f3:b7:ba:2f:
9f:8d:07:e6:8f:b5:15:c4:1f:cf:d8:1b:0e:cf:f6:
cc:2d:f9:7c:fa:3b:94:94:84:cc:a7:7a:88:fc:37:
3f:dc:35:e1:56:22:83:8a:71:c5:17:c0:73:04:e9:
1e:9f:8d:8c:16:84:9f:33:4a:d3:cc:78:4e:5b:d3:
2b:da:80:18:07:21:ee:76:dc:08:bc:87:af:43:b8:
1f:6c:4a:fd:17:08:aa:c4:e4:6d:c5:a5:88:ea:5b:
62:94:49:a7:98:60:2a:8f:38:46:7a:01:9b:aa:13:
ae:5b:3e:2b:4d:7e:5c:b8:9d:c9:ad:b2:8e:7c:d6:
75:24:40:e4:b6:e0:cc:33:51:ff:a2:25:69:b9:67:
b5:6a:57:cc:40:17:e6:1a:87:c6:1a:52:5d:46:74:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:50:58:00:7E:E5:2B:5C:0D:9A:31:CE:22:F2:DD:4A:DB:5E:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7019c381-83a9-317f-a439-01508df742b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.230.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:e6:87:e6:98:c9:1f:66:47:c2:ee:c2:2e:b7:08:c7:03:d7:
d4:5a:f5:1f:ec:79:c3:84:46:9b:9f:bc:03:e8:12:82:f3:63:
0c:2d:81:6c:83:45:f6:7a:86:c6:ac:fe:1b:77:5f:7a:24:0a:
7c:bb:ae:f0:f2:bf:66:fc:c8:11:56:55:2c:3c:ca:94:19:a0:
3c:5e:9b:78:a5:b9:5a:59:f9:ac:1f:4d:0f:11:16:ae:04:80:
b6:cd:7f:c4:65:7a:6a:bb:a7:e3:99:24:2a:b7:23:36:db:60:
1f:e4:40:b7:3b:45:3b:7e:7f:19:9e:3a:a0:f9:9a:d0:d0:0a:
72:57:43:4f:db:3a:96:91:b6:f6:96:88:f3:19:15:3d:bf:9a:
c3:14:d4:4a:e7:7c:7b:a4:60:96:67:13:4c:f1:30:cd:f3:6e:
63:07:10:60:d5:51:95:95:f0:b3:af:18:8f:5d:14:26:6a:3c:
95:96:8b:bd:ba:ed:c9:7e:40:82:84:12:98:f4:48:00:83:a0:
6f:13:b3:98:90:6f:13:f5:73:99:4c:3c:81:3c:f8:55:a6:e5:
27:0b:13:7f:11:02:8b:7a:be:a0:ea:bc:79:93:4f:01:f1:13:
eb:69:24:89:25:1c:d8:c4:28:f8:44:a6:a1:03:c6:b8:f2:ad:
13:94:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:43:37 2025 by rpki-client