Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa
File: 3fae15e1-900a-373e-b386-d052905c9332.roa (raw, json)
Hash identifier: Fpbg2f7MhyLntcqO3AdFmjNNj9Rh493DQtW9u89IBsk=
Subject key identifier: E8:1E:B7:5E:A7:94:BC:68:FC:73:78:81:E6:AC:E1:1A:ED:8E:55:91
Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial: 010D0C9F43285848239543F8C045BA34A1822380
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 30097
IP address blocks: 199.87.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:43:f8:c0:45:ba:34:a1:82:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=54c8d091-0f8b-425e-8fd6-4201b76afd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:65:2d:35:91:95:a4:d4:68:85:59:ba:f2:
b5:2a:ef:30:70:18:7a:3b:b8:9a:d3:4b:db:a9:89:
af:c9:ad:45:8d:3d:e9:8e:59:cb:1a:07:0a:e1:44:
e0:37:c6:01:07:1c:65:ca:37:3f:4e:0c:50:4b:c7:
75:56:69:18:dd:63:7e:78:e1:ed:6e:4e:b8:44:8d:
f5:a8:04:3b:42:d5:8d:0d:13:90:10:38:6c:5a:d3:
54:b0:ab:82:33:cc:cd:4b:46:68:13:52:a4:ec:9d:
5e:b4:dc:b5:25:d9:2d:8a:e2:34:0d:f6:bb:67:7e:
12:be:01:38:1c:29:83:e0:a3:e4:26:e9:3d:ed:9e:
30:e7:57:15:7b:8d:fc:bb:0d:3b:e2:b9:9b:ac:19:
a7:63:ce:d8:bf:c6:b0:05:0d:79:37:8f:a3:bb:62:
f6:f5:71:b9:b7:48:48:01:10:a6:fa:45:12:2a:62:
ee:a6:86:7f:81:20:93:48:a8:e9:17:47:27:d3:ca:
13:a0:b2:12:4a:7d:32:2c:b1:f5:a3:74:83:da:c1:
b5:a8:f7:90:70:5a:4d:7c:86:e4:93:c8:06:5e:e8:
bd:d3:f6:d3:90:3f:e2:81:03:91:61:29:10:a5:75:
f4:c9:95:7a:38:aa:e5:97:41:13:ce:7f:7f:c6:a3:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:B7:5E:A7:94:BC:68:FC:73:78:81:E6:AC:E1:1A:ED:8E:55:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
X509v3 Authority Key Identifier:
keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.87.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:a8:e4:37:64:54:50:9c:48:3f:49:e5:61:87:8c:fd:48:52:
7b:b5:70:4b:ec:22:fb:bb:a2:1c:b3:ff:86:e5:81:f1:27:ca:
0d:64:bc:c6:b0:57:7a:62:c4:8f:d0:2c:89:a9:0a:8e:cc:19:
82:89:e8:ac:e5:e5:4a:a2:49:b9:77:b3:38:e0:ec:6e:25:c3:
9a:4e:aa:43:57:25:51:e7:28:72:7b:da:26:dc:ab:ce:8d:e2:
a3:aa:53:c1:0f:01:e6:c6:9e:eb:7f:e9:a6:9b:11:dc:05:b2:
8a:65:b5:86:ae:97:3b:87:3a:64:8b:9e:5f:0d:d0:5a:4b:df:
03:75:9e:66:95:d0:2f:e9:3d:7f:c2:89:2a:56:4a:45:11:f4:
36:c1:e9:2b:22:17:49:e6:53:5c:2a:6a:e1:d5:7b:ea:bf:3c:
44:6a:f6:a1:15:af:00:04:a3:59:8c:29:4e:9d:58:fa:e6:44:
d6:05:b6:ac:78:1f:04:35:0b:85:9c:f1:a9:95:fd:54:6b:a9:
ef:63:28:33:1d:0a:15:64:de:42:48:28:25:a2:03:99:e3:e0:
01:fb:1d:f7:1e:e1:9e:dd:06:f7:02:4d:fb:e2:e9:6d:76:d9:
aa:78:6d:d7:ca:b4:78:08:a0:2c:53:19:20:5c:ff:3a:d9:8c:
4c:18:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:47 2025 by rpki-client