Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/f9798137-b618-3b75-a215-c6897b42d2ee.roa
File: f9798137-b618-3b75-a215-c6897b42d2ee.roa (raw, json)
Hash identifier: J9I88b8EtKvUSYaQxxi/lZ1ghc7FPPzb+scOzp/kp48=
Subject key identifier: 1F:F3:05:C2:2D:BC:6A:9D:BF:23:4B:4E:F1:88:D4:47:C9:AF:5F:3A
Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial: 010D0C9F432858485470315EA3B0A3FFBAE13880
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/f9798137-b618-3b75-a215-c6897b42d2ee.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 26677
IP address blocks: 199.212.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:31:5e:a3:b0:a3:ff:ba:e1:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=dab95c64-4f14-4ec9-b8e8-25eea94c72fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:e7:14:4b:a9:db:f7:dc:7e:4a:4e:af:be:
2c:a6:13:2e:19:08:aa:b7:6c:3d:e7:12:bd:aa:4b:
34:99:40:34:f0:5b:c9:57:c6:74:d6:0f:a7:7f:b9:
85:c2:29:59:f8:5f:7e:93:19:b4:16:5b:96:94:e0:
18:37:61:d2:de:5f:5e:1c:8c:93:6a:18:45:43:50:
56:39:36:ea:86:6d:62:7b:91:df:7c:b4:5f:4b:3d:
37:3f:90:0f:17:7c:54:04:91:41:0c:79:57:77:6b:
71:81:e5:77:a8:c0:ba:1e:42:2e:65:7f:5e:2e:6a:
4f:fa:a7:70:7d:85:c0:73:53:53:3d:1f:0f:c3:5a:
c6:f1:31:71:3f:32:76:6e:64:b8:eb:80:30:56:90:
8e:47:64:66:0a:a9:24:16:59:19:5a:65:96:e0:e4:
47:1b:56:97:c4:b6:6c:45:28:9c:05:10:2a:80:8d:
26:6b:45:d7:d8:9f:0c:77:85:b6:be:67:ad:04:22:
af:e7:0b:4d:99:19:cc:37:eb:69:3c:86:c2:ee:2c:
e3:00:c0:3d:2f:a2:46:e4:9d:0d:bc:bd:37:1d:03:
96:7f:d9:8c:43:c0:6c:74:e7:1e:b1:07:26:33:72:
97:38:e3:34:9a:ab:9a:56:5b:85:eb:1d:94:27:e7:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F3:05:C2:2D:BC:6A:9D:BF:23:4B:4E:F1:88:D4:47:C9:AF:5F:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/f9798137-b618-3b75-a215-c6897b42d2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
X509v3 Authority Key Identifier:
keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:40:75:2b:36:52:9a:96:f2:64:a8:c9:5c:0a:fb:3f:82:49:
e1:1f:90:c7:51:3b:c2:77:d2:ee:f8:29:71:2b:da:55:b7:7d:
88:1b:7a:75:b9:ce:65:f4:2e:67:9f:2a:dd:ae:50:ef:74:f7:
91:d2:ba:fd:94:74:57:85:4c:d2:4c:46:f8:c5:e2:f7:85:46:
d4:54:07:22:3f:26:37:20:00:9f:70:ec:6d:af:f8:82:ec:c1:
47:0a:3a:4b:47:f3:6c:c1:89:94:71:e6:2f:12:f8:ee:07:d3:
6a:ec:61:5a:68:21:ec:36:b7:64:fa:bd:29:57:7b:fb:b3:0f:
04:d5:a7:05:05:42:45:b8:a4:b1:a1:b7:12:d0:f5:3b:f8:50:
59:e2:01:6e:3c:b0:fe:16:bd:bb:f1:21:ea:47:e0:e1:49:4e:
f7:30:be:b1:8a:65:93:7a:47:96:e6:82:ac:9e:19:cd:8b:68:
08:ca:71:ee:e9:1a:4c:43:ef:15:b1:d8:a2:a6:42:c9:66:a3:
78:24:3a:12:b5:b4:41:98:86:ba:fe:81:86:50:bb:e0:95:39:
0f:59:80:8a:22:c1:dc:ef:6f:00:f9:5e:c0:bd:fb:0d:6a:0c:
07:70:c9:e1:50:56:92:c4:a0:00:91:12:7d:4b:59:80:89:ab:
8e:dc:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:53 2025 by rpki-client