Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/cdd09a13-9c20-3caf-bd14-d3b3f7d34355.roa
File: cdd09a13-9c20-3caf-bd14-d3b3f7d34355.roa (raw, json)
Hash identifier: 6h2HEQDGlb9HMHrwL2RQO6+fhhx7vpTDrExkIroDAoY=
Subject key identifier: A6:D8:8F:07:A2:00:54:9C:40:35:00:4D:06:A3:B4:78:97:C7:3D:EA
Certificate issuer: /CN=5f55a9bc-459c-49dd-8940-ede4a86712a5
Certificate serial: 010D0C9F432858483E1AB6EE5C34C0201463A680
Authority key identifier: 90:A5:CB:75:0E:E7:24:B4:B7:3D:AB:91:C2:B5:78:7B:96:A7:13:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/cdd09a13-9c20-3caf-bd14-d3b3f7d34355.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 199.188.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b6:ee:5c:34:c0:20:14:63:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f55a9bc-459c-49dd-8940-ede4a86712a5
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=30aa0dfe-f619-4afe-8059-2b1517f7489a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:75:e5:c3:42:65:a0:d9:20:36:b5:fc:fe:
90:e8:6f:f2:d0:2e:46:7e:16:d9:5e:ca:27:f1:ae:
87:b4:0c:ef:f0:ee:55:b0:e4:47:67:18:38:52:cd:
ab:c3:1a:f1:e3:8d:ae:93:8d:6b:39:15:67:bf:20:
f7:d3:5a:51:9c:db:ce:e6:c7:99:75:41:cc:79:8e:
94:f6:15:83:3f:b6:fe:9d:cc:82:80:b6:76:83:01:
45:09:6e:e5:78:ee:41:26:da:c3:46:cd:3a:db:ce:
38:16:85:48:a3:e8:97:1e:58:fd:54:57:7d:1e:f4:
6d:e4:92:03:ea:49:80:a7:21:54:59:ae:c6:b3:06:
cf:94:c8:bf:d5:de:45:6d:6e:10:fa:bc:82:23:17:
28:9e:32:43:42:8c:96:e7:f0:fc:6e:ed:a7:5d:4f:
af:d8:69:3c:5f:90:eb:0b:be:8a:40:83:03:91:ac:
95:7e:b6:a7:72:5a:61:d8:47:e0:c5:fb:07:75:b4:
6b:84:b1:48:ba:2f:52:51:0c:15:02:e2:99:82:52:
f9:34:42:67:fe:c4:65:21:db:bb:bd:50:56:88:6e:
f5:67:1f:c9:a8:3b:38:1a:51:a3:7d:4a:17:f8:78:
4a:56:e1:7f:1a:c6:a1:fb:30:e2:02:fc:e2:40:8c:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D8:8F:07:A2:00:54:9C:40:35:00:4D:06:A3:B4:78:97:C7:3D:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/cdd09a13-9c20-3caf-bd14-d3b3f7d34355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5/5f55a9bc-459c-49dd-8940-ede4a86712a5.crl
X509v3 Authority Key Identifier:
keyid:90:A5:CB:75:0E:E7:24:B4:B7:3D:AB:91:C2:B5:78:7B:96:A7:13:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f55a9bc-459c-49dd-8940-ede4a86712a5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.188.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:54:8a:c3:9d:0d:10:fb:3b:c1:80:06:98:52:14:d7:b7:8a:
77:28:45:1f:3a:29:6f:39:b9:b6:fe:4f:be:7d:43:80:dd:0d:
9e:99:3e:fb:93:95:90:b5:f6:7c:b4:65:cb:68:35:1e:0f:ec:
ea:07:99:3e:64:6b:9e:d4:74:95:9c:83:40:eb:e0:24:5f:79:
5c:02:e5:08:07:c9:bf:35:f9:ed:e2:52:c7:d2:23:03:b5:74:
d8:9b:4f:93:3b:7c:fe:91:71:bf:75:8c:c3:f0:36:64:75:58:
3e:4c:79:20:ee:49:99:e2:5e:b1:ff:2c:c8:fd:da:bf:4d:18:
74:9e:21:2c:93:24:0b:d1:7f:9a:1c:92:cb:d3:d7:81:3f:54:
bc:89:25:b3:1e:32:34:a3:60:59:e9:11:b8:23:1f:f5:e1:ff:
41:dc:d4:40:ba:db:e1:d6:da:8c:6e:a0:56:b8:ed:d0:20:7b:
e6:2e:f3:de:93:04:61:42:b1:a5:11:af:cb:81:f8:ab:85:a4:
36:1c:e3:73:9f:5d:8d:d8:b2:3e:f7:45:82:07:2e:8f:ae:6d:
93:1a:06:67:b9:70:cf:77:6f:8b:0a:bb:5f:6d:18:6f:4d:f5:
48:72:a4:5f:cc:1a:33:f7:ce:50:99:bf:af:04:8f:d3:44:dd:
59:29:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:36 2025 by rpki-client