Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa
File: a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa (raw, json)
Hash identifier: e0E2mV7xiWbwHoOOKi4XNVIvJrLXAW8cZSDMr1UTCPI=
Subject key identifier: 5D:DB:F9:B3:C2:5C:12:3A:DA:AA:4E:29:1A:AA:C6:19:8E:23:57:34
Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial: 010D0C9F432858483F8023FB1395519EA6464DC0
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 199.187.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:23:fb:13:95:51:9e:a6:46:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=65f743dd-766f-447d-bf29-af7f81aef780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:8c:5f:51:d3:7f:f6:ce:b2:ce:94:07:91:
9b:bb:8c:4f:09:a4:70:d3:ea:62:c5:2f:b7:a8:27:
dd:5c:67:7a:69:dd:57:d8:74:2f:be:2a:af:b5:39:
d9:97:d3:ed:a4:9c:6e:80:23:32:b3:e7:44:3a:a6:
8c:e5:c9:45:60:e6:58:4d:bc:c3:d5:c2:05:10:c0:
51:51:99:ff:1a:24:75:bf:f9:08:c9:0d:48:cc:c6:
9e:1d:c5:06:f4:44:a1:98:89:3a:7e:29:8e:de:1b:
55:fa:7d:59:49:06:29:0d:c4:7c:c2:19:b2:35:8a:
31:7f:53:de:00:68:73:6d:ed:54:ae:b1:c4:c2:13:
b0:7b:65:f7:d4:03:5c:2b:5e:c4:a3:74:23:8c:fd:
97:b3:97:42:51:a2:cf:df:50:27:d1:bf:6a:55:ad:
ba:c5:f8:0f:9b:39:a8:4d:5b:aa:b6:41:2a:18:b3:
34:b8:a3:0e:02:02:47:03:71:91:40:a8:af:90:cd:
63:3d:29:1c:ef:92:4d:26:73:c3:f2:32:c9:4f:ea:
91:54:a3:e0:dd:52:b0:b8:43:5f:e6:09:a7:e0:49:
37:65:b0:67:35:bd:69:99:fe:0e:d2:fd:7f:b7:94:
cd:2f:c9:bd:a7:8d:9e:6a:2e:42:e2:b7:a4:c4:3e:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DB:F9:B3:C2:5C:12:3A:DA:AA:4E:29:1A:AA:C6:19:8E:23:57:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
X509v3 Authority Key Identifier:
keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:d6:3f:c1:95:6d:3d:70:6e:bc:8b:4b:9e:8f:d8:4c:01:77:
f2:b9:98:26:a7:4f:51:fe:a9:fd:96:8a:16:7d:4f:fd:45:43:
19:8c:bc:e5:9a:a5:c7:dd:58:73:67:5b:ad:f4:4c:3e:19:25:
29:26:e6:ae:67:db:db:bf:3b:c3:db:ee:eb:49:44:54:b9:38:
6a:9d:a8:a1:80:f2:b3:9c:0d:7a:df:ee:48:d3:c1:ce:66:a2:
bb:d4:da:22:16:56:0b:eb:fc:87:7c:20:af:a5:37:c8:6a:31:
96:ab:86:ec:33:1f:35:6e:fc:6e:51:fd:c1:c2:7f:af:fd:9c:
f9:94:be:b3:5d:75:e5:b4:08:e6:91:27:b0:56:66:71:ce:3d:
99:12:75:84:52:64:d4:53:f4:9d:e0:2d:90:96:fd:92:b4:a1:
a0:9a:94:e4:a3:d5:75:ab:b6:bb:18:09:58:7b:ad:9e:ef:58:
60:8e:f7:db:93:ec:5c:6e:f2:93:64:c0:2a:a3:4e:3d:63:16:
33:82:a1:d9:68:7c:02:24:ef:ff:dd:1f:54:7a:22:38:33:5a:
2e:4c:59:9f:1b:b1:c7:06:21:65:2d:10:19:7d:46:00:5f:79:
cd:54:68:93:16:90:47:f8:e1:f2:f0:7a:bb:76:6a:ba:e9:d5:
fe:f3:27:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:13 2025 by rpki-client