Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9c0b9e07-a223-3cf8-ac7d-38abf67bd77a.roa
File: 9c0b9e07-a223-3cf8-ac7d-38abf67bd77a.roa (raw, json)
Hash identifier: QhCoPTNdY1AvBv3r29u49vvae+jFn8WMfPMBv/F6k8s=
Subject key identifier: C0:49:89:36:D6:29:0C:61:0E:4E:66:6D:A5:02:48:24:B6:D3:D2:5F
Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial: 010D0C9F43285848573AD6F2D26F259CBD7F3160
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9c0b9e07-a223-3cf8-ac7d-38abf67bd77a.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 36511
IP address blocks: 199.101.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d6:f2:d2:6f:25:9c:bd:7f:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=4d81d7ee-6597-4eab-badc-279767c1bc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:68:a0:7d:d2:9b:8f:43:a5:89:95:cf:63:
d6:f6:f3:19:ef:a4:bf:0f:30:d2:4a:92:78:cd:1d:
27:7d:8e:ab:28:f7:18:ac:db:4c:ce:22:3b:e7:a8:
9d:93:9b:b4:aa:7d:0d:3a:de:4f:c0:00:18:46:fc:
30:af:fb:3d:77:39:92:01:4d:e1:74:aa:6f:9d:88:
bf:96:b8:f7:c2:96:e6:23:20:24:db:63:7a:9f:d8:
65:47:87:81:5d:ea:f6:80:87:ef:06:50:df:79:ba:
1c:92:66:c8:0a:97:22:e4:40:d9:e0:90:ad:c4:78:
84:aa:ae:a1:0a:88:8b:af:d3:07:56:a9:a0:3a:5b:
10:b4:da:9c:6b:bb:00:99:3f:6c:f2:72:76:06:1c:
92:6c:1f:f4:c2:53:dd:fe:d6:b0:d7:e1:4e:fe:b5:
d6:53:be:c1:98:8b:33:2f:18:28:d5:2d:52:93:95:
01:6d:77:e4:a7:4d:d6:df:b4:c0:bb:ad:16:e7:8e:
c1:fa:6e:3d:73:b8:10:b4:79:ea:6f:66:26:ee:bd:
41:0b:70:c4:01:14:74:74:9a:9a:86:71:6d:d1:5f:
96:62:9d:08:11:39:90:07:5b:ad:fd:76:5d:c7:5c:
0b:4e:a0:46:bf:a4:34:4e:5e:de:c0:52:aa:b1:58:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:49:89:36:D6:29:0C:61:0E:4E:66:6D:A5:02:48:24:B6:D3:D2:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9c0b9e07-a223-3cf8-ac7d-38abf67bd77a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
X509v3 Authority Key Identifier:
keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:8a:94:1a:73:af:ec:d4:a3:82:27:ce:68:f3:6c:43:84:69:
7d:ad:33:a5:59:bb:ed:34:32:38:1e:34:25:b6:6b:2d:45:e8:
48:be:fb:9a:b8:13:26:9a:e2:93:7d:f5:15:fe:9f:e0:65:2f:
74:09:04:d4:56:16:e8:18:c9:3e:5c:ba:03:63:ab:4e:86:bb:
fc:ca:ae:54:bf:2e:de:6f:a2:67:06:a2:a6:7c:23:a3:99:ce:
09:a8:8b:6a:f2:a7:24:99:9b:08:7d:6e:e2:48:1b:d3:a6:e4:
48:fc:40:75:fc:73:07:fe:b5:cd:d6:8b:ab:72:57:45:ac:9c:
d2:90:59:a3:05:67:bc:d3:21:ee:60:ff:ab:27:e4:96:02:e1:
28:8d:d5:bf:98:66:fc:54:d6:ab:61:82:50:c5:3f:0b:f2:b4:
5e:80:da:dc:ae:80:bc:c7:4d:28:00:fa:38:95:ea:ed:44:a1:
4c:a0:f6:80:60:40:65:09:f2:fa:93:b5:b6:7d:10:64:2c:cf:
d2:cb:ff:d5:89:bf:c0:1a:24:25:87:a2:78:96:7f:9c:e6:8b:
71:51:fc:cd:c4:18:e4:76:34:a7:84:1c:e7:08:6d:51:c6:11:
6f:e5:0c:0d:83:37:ec:49:17:ec:d1:22:03:d7:6b:19:ac:d3:
4b:cc:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:55 2025 by rpki-client