Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/606e616d-d614-3c85-a072-e87b54f4b4be.roa
File: 606e616d-d614-3c85-a072-e87b54f4b4be.roa (raw, json)
Hash identifier: y00LfSK1jaFM0A5YdMJd//PT2A6JI8tpf9Eba2FRLRQ=
Subject key identifier: E8:59:C1:44:30:16:55:A8:75:F6:45:4C:9C:6F:5F:DD:E3:D0:88:CD
Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial: 010D0C9F432858485470312DCDEA796E9C1B6000
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/606e616d-d614-3c85-a072-e87b54f4b4be.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 65224
IP address blocks: 199.212.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:31:2d:cd:ea:79:6e:9c:1b:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=30812757-77e5-48b9-8c65-ac6caeb8a61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:da:85:04:ce:0f:7c:bd:c5:a1:36:86:6b:
dc:49:e5:f3:1a:f0:26:ac:9f:a3:39:1b:f7:17:a4:
4c:e2:39:fc:aa:fd:67:df:f7:dc:8a:2d:17:77:1f:
76:1e:75:62:9c:3a:77:9c:04:9a:b5:39:4e:6a:aa:
1c:17:54:0f:c5:95:31:fa:e2:1b:d1:2b:4f:93:50:
65:ff:f3:91:c8:16:85:f5:88:18:7e:2b:83:fa:e4:
ae:62:72:94:fe:32:39:f4:5e:72:af:9c:84:ab:09:
34:a7:22:03:8a:2b:84:39:d8:b0:b2:75:82:fa:38:
85:2d:9b:c4:ec:a4:42:a8:d9:a7:c9:1b:4f:3c:bd:
4e:4c:92:ec:61:49:62:c3:cc:7a:43:e5:a1:e3:ff:
fb:45:8c:d5:17:87:27:16:ae:aa:17:e5:ca:49:30:
14:59:8e:39:4b:b1:be:8b:52:50:4b:55:a7:90:7e:
aa:69:5c:14:9d:62:4f:ef:ab:de:d3:bd:a6:27:e1:
5d:31:78:aa:2f:c7:09:1a:5e:48:75:74:4e:8e:02:
9b:43:4a:2e:20:8f:19:9f:e0:7f:61:d5:a9:49:5f:
cf:c2:35:63:4f:5e:ef:59:22:48:39:35:81:49:ee:
d0:0e:fb:c7:32:19:51:cc:c3:1f:58:54:3d:7c:dc:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:59:C1:44:30:16:55:A8:75:F6:45:4C:9C:6F:5F:DD:E3:D0:88:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/606e616d-d614-3c85-a072-e87b54f4b4be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
X509v3 Authority Key Identifier:
keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:a3:26:08:b0:35:c1:18:3a:35:3d:3b:1d:14:79:1d:84:8b:
06:e3:ad:1b:62:4b:54:95:35:7f:f4:44:5d:5b:65:5d:00:42:
4a:a1:d8:99:32:e6:ac:a2:b1:ae:37:d2:3b:8b:25:47:7a:87:
64:fd:22:3e:f0:67:b6:95:5d:87:2d:73:2f:88:7f:e0:de:b2:
b0:0d:78:02:6c:3b:bb:eb:2d:16:55:87:78:b8:e2:29:59:48:
c9:c0:9f:47:59:2c:3a:eb:66:6e:f7:43:95:29:b9:3a:0d:8d:
eb:d1:27:be:97:b5:12:f1:6a:4f:54:a1:44:22:68:64:4d:d7:
04:3c:5f:6a:04:e3:8a:dd:d1:3d:74:c4:96:9e:1c:f8:9a:f8:
8a:cf:fd:3c:93:7c:55:35:fb:cf:f0:c2:b9:57:8a:7f:1f:f2:
4e:76:06:c9:1d:8c:64:4e:a5:22:81:98:57:af:ea:e5:4f:f1:
ee:1c:6d:dd:50:d2:f6:df:18:e7:4e:ee:61:05:8f:0a:9d:54:
40:5f:18:25:df:bb:6a:22:48:17:e9:e4:e3:90:95:e9:88:d8:
40:cb:40:bc:c7:ca:64:c8:36:80:69:69:f6:ff:18:18:90:23:
ae:fe:d4:a5:80:be:1e:e4:98:cf:a3:70:fa:3b:b6:be:eb:e4:
6e:d3:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:19 2025 by rpki-client