Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972/4a387397-2733-3034-8b71-903426b6d408.roa
File: 4a387397-2733-3034-8b71-903426b6d408.roa (raw, json)
Hash identifier: qlxBFf26+NGenxYlQNsLY5OwLDLhMzvU+4k0qMl2AGA=
Subject key identifier: 43:66:8E:FB:E8:58:19:65:21:34:FB:1E:65:54:32:AB:83:74:62:E6
Certificate issuer: /CN=7349389a-27ec-40bc-a722-e288a622f972
Certificate serial: 010D0C9F4328584878BB05FD2068484AA0340980
Authority key identifier: 6A:06:53:26:8E:34:11:3D:D3:AE:75:1F:01:6F:47:46:73:3F:01:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972/4a387397-2733-3034-8b71-903426b6d408.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 399630
IP address blocks: 199.212.143.0/24 maxlen: 24
2602:2bb::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:05:fd:20:68:48:4a:a0:34:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7349389a-27ec-40bc-a722-e288a622f972
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=a16b2836-2e99-4a60-b1cc-e0849551ec7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:de:03:0d:b0:89:9c:46:1d:63:db:3a:12:a6:
6b:ba:1f:c8:0f:cc:0b:66:a8:e3:6c:11:93:a3:a7:
b2:af:66:cf:bf:8e:40:13:ad:a1:b7:f4:66:69:1e:
1a:6a:0f:3b:86:4c:0d:09:a5:39:45:45:b2:c6:78:
1a:44:42:41:fe:f3:dc:17:a7:69:8a:8e:85:45:4a:
2a:00:de:ff:6b:40:4f:6c:db:30:40:bd:3e:ee:f6:
0a:35:04:21:33:c1:13:59:a0:4b:99:15:27:cb:78:
b8:fc:62:af:85:71:1e:24:1d:d9:b8:cd:52:62:1d:
c3:72:2a:d3:d7:dd:d8:9e:51:d3:ca:50:6b:7f:4a:
19:53:ad:f7:2d:36:37:87:80:4f:ed:ad:2b:89:3b:
7f:69:06:c7:45:03:02:28:88:21:00:83:8b:d3:1d:
0b:0e:fa:cc:06:8d:75:9a:ec:a3:4d:8a:0e:51:97:
01:25:86:af:95:32:4f:39:1f:a8:d3:53:f4:46:17:
fb:30:5e:21:59:ad:8c:b1:ce:01:9d:31:69:2c:97:
e6:f9:18:9f:8c:0b:fe:05:15:c9:52:76:69:47:28:
00:77:14:8a:5f:10:48:2a:01:6b:6b:e2:a7:dc:86:
1f:e2:36:aa:38:61:9b:a6:30:56:16:d0:09:78:29:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:66:8E:FB:E8:58:19:65:21:34:FB:1E:65:54:32:AB:83:74:62:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972/4a387397-2733-3034-8b71-903426b6d408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972/7349389a-27ec-40bc-a722-e288a622f972.crl
X509v3 Authority Key Identifier:
keyid:6A:06:53:26:8E:34:11:3D:D3:AE:75:1F:01:6F:47:46:73:3F:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.143.0/24
IPv6:
2602:2bb::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:88:0d:01:4b:8d:8c:6f:fa:8d:55:ec:42:9b:15:9c:16:b5:
f0:33:78:cd:3f:5e:b9:b0:f4:e6:1f:53:0c:9c:ea:23:85:e8:
df:a2:3c:01:cb:2f:4a:04:db:98:5f:8c:02:58:7a:9b:62:ce:
b5:e8:1a:e7:6e:e0:f9:0f:1d:47:61:1d:dc:8e:fc:a5:46:88:
38:62:8b:a8:36:67:16:21:fa:47:d5:2b:5e:0d:78:ab:91:8c:
c5:a4:32:f9:65:88:b5:d8:fc:ad:3b:27:85:c9:bc:ad:91:95:
23:9c:10:5b:85:50:ae:20:cb:5c:7c:e8:0a:3f:d5:4c:86:76:
7c:32:3e:ab:f8:70:86:4f:22:40:76:1e:44:15:10:c0:5c:1c:
97:90:77:a5:8a:65:1d:63:1a:c2:08:6f:e8:23:4f:62:1f:88:
96:ed:09:68:4b:a5:d6:8a:36:e7:d6:46:62:46:e6:24:4d:cb:
cf:95:38:5d:f0:27:43:0b:62:6e:4c:14:47:e5:ef:9c:28:c2:
4e:6a:ed:9c:72:78:20:03:69:07:cb:d5:53:84:ff:98:28:a8:
ac:21:fb:44:da:a7:e0:88:cf:8b:e2:c0:ae:11:2c:7d:40:b8:
a0:76:c7:69:8e:61:52:6f:aa:c1:05:3b:ec:ef:1b:e9:1b:a6:
c4:1b:e9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:22 2025 by rpki-client