Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa
File: 9b5be190-61be-3524-9a29-a7fac18f508a.roa (raw, json)
Hash identifier: SJBNsTC8V43FG++Sa1Tl9J0RO/P8VgeUwrl8rddAfsg=
Subject key identifier: C7:82:80:30:67:A6:B0:CA:0B:9C:0D:FE:A4:D8:B6:CB:5B:8C:F0:D2
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F432858481C9A8CF6FB264F90E1389580
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 212384
IP address blocks: 199.48.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8c:f6:fb:26:4f:90:e1:38:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=2acc73a3-b83e-4cdd-970c-51d409e5fc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:be:8d:23:ba:7a:e9:d7:72:fb:c1:d8:70:
03:15:cb:fa:6b:a7:e2:1c:13:51:53:f4:37:73:b1:
92:1f:94:87:0d:40:63:82:bd:3d:8f:99:6a:79:6f:
c8:3c:80:33:84:37:c7:a3:1c:0f:d8:8f:16:ac:37:
d7:c8:59:c6:4d:b4:8e:d9:cc:b4:69:2d:c8:f5:e2:
5f:fd:ce:5f:17:fb:0c:7a:fb:fe:85:49:93:46:ff:
56:ce:4c:6d:29:28:f4:a1:65:e5:1d:78:c3:7d:96:
a8:62:8a:29:48:fe:a9:85:1f:ea:e0:2e:00:6f:9b:
d8:cd:40:e1:4c:b8:93:33:a8:dd:9a:23:b4:65:58:
c3:64:72:24:e1:7d:ea:bb:a6:df:72:5a:05:f8:62:
cb:e8:f5:8b:87:ac:6d:26:2c:ae:17:84:dd:9d:f2:
60:8f:4d:f6:48:5e:4a:54:6b:87:03:55:12:3e:a9:
7d:eb:8b:93:bf:9d:35:93:dc:af:36:32:d3:b3:37:
ea:75:1c:3b:08:76:5f:eb:e6:fe:2c:8a:dc:98:c6:
b7:48:e5:5b:5d:00:37:7b:da:db:b1:23:08:69:90:
5e:f7:84:74:d6:d7:c6:01:42:84:e6:b8:ff:7b:b3:
e1:76:c0:38:13:a5:18:62:ec:7a:1d:93:44:0e:0f:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:80:30:67:A6:B0:CA:0B:9C:0D:FE:A4:D8:B6:CB:5B:8C:F0:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:63:91:da:80:a1:2f:56:2b:2a:0e:0e:65:ca:4c:08:52:78:
4c:1a:4d:f5:ef:01:62:4f:a1:6f:b3:be:6d:a5:27:12:2b:3b:
d1:5f:ad:fd:14:d6:f0:3a:30:8b:c8:26:d8:bf:2a:d8:97:35:
ba:be:5d:78:b6:e2:fc:09:d2:93:ae:ba:32:f5:82:f9:c2:ea:
d2:4d:40:4a:85:cb:d7:77:ff:eb:0e:83:dd:be:53:d2:93:d4:
e3:f6:18:3f:21:6d:61:4d:42:0d:e0:be:4c:19:8b:fe:48:9c:
b9:c1:aa:dd:2a:59:ed:4e:32:74:50:e3:c7:52:05:3b:6e:0e:
4a:ac:ae:d5:16:b5:29:8e:95:3f:6c:04:c4:40:dc:90:67:98:
e0:40:27:7f:ae:f8:89:6f:f4:72:ee:7f:0e:04:28:f2:3f:be:
c2:e7:c4:72:d3:37:ab:21:f4:09:51:f6:74:a4:a3:87:7b:42:
b9:3b:19:f6:59:43:e6:99:4d:c0:5c:80:8a:2e:48:c8:e5:4f:
30:8f:99:13:62:37:ea:18:6a:75:62:32:bd:44:7f:c2:06:97:
d9:6b:7f:8f:bb:9e:41:0d:7f:56:1b:d2:7c:43:5e:a4:22:42:
8f:7b:cf:a6:48:dd:ee:49:9a:fc:0c:f7:4c:d5:c1:8f:b5:49:
39:cd:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:29 2025 by rpki-client