Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa
File: 6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa (raw, json)
Hash identifier: giQcKxd5//a5SA3/I47lxvLHwDn3A0dJbunnys3LdGc=
Subject key identifier: 5A:52:0A:CB:E7:A9:13:A1:C8:8A:E5:E1:6D:46:5F:A3:AA:1E:8B:56
Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial: 010D0C9F43285848064506DB2D01BE0FA8DF1BA0
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 26677
IP address blocks: 199.212.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:06:db:2d:01:be:0f:a8:df:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=7cf328d1-5860-485f-bc94-7e1802fcd317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:9a:3b:67:39:d4:3f:08:d4:24:16:54:ad:
4f:72:b0:d2:23:22:ca:8c:c5:23:ff:0e:bf:da:81:
e5:dd:d7:20:54:58:17:7d:c2:15:54:20:96:cb:88:
f7:aa:be:fa:59:90:65:6d:19:5e:55:e6:44:b4:63:
13:b6:f1:2b:77:00:00:c8:57:c4:30:4e:54:28:4a:
b4:7b:e6:41:7b:49:9b:6c:a0:14:8b:d1:d9:95:3d:
94:1a:7c:74:76:17:e4:d8:dc:86:ba:ff:32:0f:8c:
d9:0e:eb:e6:44:80:bc:13:4f:13:92:7f:e1:f5:4b:
5d:fa:84:f8:ca:e5:c1:75:04:8c:0c:de:e1:1a:e4:
8f:a6:9d:27:97:4e:1e:15:84:2c:3f:36:2a:9b:ab:
d0:b8:b0:8a:d5:30:67:8d:9d:5c:f7:6c:38:de:6a:
46:8e:d7:b4:06:88:9f:61:bf:68:41:1b:f7:4e:4e:
ac:ba:04:8d:6d:eb:ec:6f:ea:1f:47:e2:cc:41:62:
ff:74:4f:5b:f3:b7:4e:f7:06:2e:76:b9:34:12:66:
26:98:23:50:28:c1:ee:0e:5b:c1:2a:2c:b1:ec:71:
26:f0:83:1e:5d:a7:77:d4:ea:8d:41:d5:50:f8:4c:
bd:4c:3a:8f:c6:88:b9:63:e8:b3:b3:5c:6a:5d:2d:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:0A:CB:E7:A9:13:A1:C8:8A:E5:E1:6D:46:5F:A3:AA:1E:8B:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
X509v3 Authority Key Identifier:
keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:fa:3e:6d:a7:dd:88:d9:9c:c2:e4:16:8e:7e:47:ae:ff:ae:
17:ef:dc:9c:83:84:04:19:59:c0:21:c6:d5:dd:32:47:81:9f:
42:57:8b:6f:7d:0e:2c:e7:b4:56:01:cb:7f:7e:98:6d:6b:c8:
ba:15:2c:fe:a2:0f:c3:a7:59:d2:48:61:3f:36:67:f1:f9:0a:
0c:35:a2:51:0a:2d:99:1f:d9:08:b8:c4:d7:e0:6b:a9:eb:f1:
ab:32:a1:6d:f1:1e:0a:1a:f8:f3:12:fe:72:ec:1f:a2:af:10:
3a:f3:b0:7d:85:61:c9:1a:c5:b4:11:d2:7c:f3:b2:de:ca:bc:
75:f7:64:7d:a5:1d:a2:f4:fe:27:9b:22:47:96:18:14:f1:22:
95:ed:e0:54:1d:67:7b:08:12:ed:cd:a0:6e:ab:cf:9d:6a:3f:
3e:d5:c7:5c:2a:f9:09:17:9e:b6:a2:65:68:a1:c9:35:55:d7:
5e:aa:c9:c0:ea:fb:ec:c7:0c:e0:e8:4e:32:62:6d:93:1d:c2:
6f:af:dd:f0:cb:cb:ec:b8:72:c7:97:4e:a1:44:b1:7e:6a:e2:
fa:14:c3:20:f6:63:17:ff:e3:31:c6:b3:05:a4:f9:fe:89:2b:
34:a3:19:5f:9f:58:32:67:41:80:8a:a0:5f:8e:fd:e0:4f:ef:
44:be:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:13 2025 by rpki-client