Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/860520bc-0fc4-332f-8787-78503cad774b.roa
File: 860520bc-0fc4-332f-8787-78503cad774b.roa (raw, json)
Hash identifier: f3T3nIT8aeroZTa0jXn/V57Sz410mXhqb86/Ic7rMo0=
Subject key identifier: A7:6D:A8:A4:2E:4E:90:C8:DD:B8:87:D0:DA:45:B5:8C:BC:96:EB:5E
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285847F2BA39020C1297FA803C5920
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/860520bc-0fc4-332f-8787-78503cad774b.roa
Signing time: Thu 21 Nov 2024 02:00:38 +0000
ROA not before: Thu 21 Nov 2024 02:00:38 +0000
ROA not after: Wed 19 Feb 2025 02:00:38 +0000
asID: 30133
IP address blocks: 199.6.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:ba:39:02:0c:12:97:fa:80:3c:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Nov 21 02:00:38 2024 GMT
Not After : Feb 19 02:00:38 2025 GMT
Subject: CN=4e5f15ca-58cb-4b54-b8df-0b121ae65d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:a5:b1:ab:da:ea:62:55:f4:bc:cd:01:67:
2e:f0:1c:e6:b3:9d:10:d4:e6:9a:00:d0:03:96:27:
f7:cf:97:10:32:75:73:38:77:f6:35:64:9d:03:16:
53:60:71:6b:ff:00:53:84:f1:eb:09:a9:2a:82:0c:
e3:80:48:94:62:60:8e:32:40:b4:24:00:dc:b0:e8:
44:20:1d:d3:a3:e5:27:5c:76:bd:61:1d:eb:9b:db:
53:f1:ac:16:15:06:0e:8f:34:19:ea:46:d3:10:1b:
72:36:6a:8b:3b:3d:a6:1c:e7:1b:43:b9:f0:60:86:
a7:1d:ad:2c:c1:42:8c:a9:51:16:0b:46:46:01:3b:
99:40:24:7e:2e:71:b8:f4:95:a5:43:c3:cc:b0:bb:
a0:7f:f0:27:64:b4:c0:c0:a0:a8:46:fa:63:78:a2:
92:70:e3:b0:05:52:3d:be:b1:7a:32:d7:ae:ed:08:
08:2a:f5:f9:8c:3b:df:ea:90:ec:80:be:44:b7:98:
f2:dc:df:6b:2b:5c:8a:a4:7f:73:ad:af:f0:ff:fc:
70:d5:bd:d0:58:9d:29:bd:c2:5a:29:1a:ea:2c:31:
54:8e:82:65:fc:7f:c8:af:fa:cb:8e:a6:a2:ec:9a:
12:03:8c:af:58:94:8e:90:aa:de:a5:28:7a:a1:35:
f4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6D:A8:A4:2E:4E:90:C8:DD:B8:87:D0:DA:45:B5:8C:BC:96:EB:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/860520bc-0fc4-332f-8787-78503cad774b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
199.6.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:9d:19:91:88:7a:a7:e0:38:78:ee:1e:70:df:2e:c3:41:c1:
cb:52:e5:9e:7a:06:66:34:83:5c:2f:14:5d:13:b3:7f:ba:a9:
cb:43:ea:f0:8d:32:66:8f:3d:fd:98:17:61:a4:ce:9d:04:c1:
3d:95:35:4d:38:74:a8:9c:6c:e5:51:85:d6:3f:57:69:a3:25:
42:3b:df:c7:91:3d:a1:e8:e8:fe:f8:d1:52:12:a9:a8:81:b6:
dd:de:37:a7:fb:bb:13:29:dd:47:7a:2c:3c:ca:ab:2f:3d:5d:
0f:a9:c2:d7:25:14:c6:31:cb:5d:68:de:fe:cd:2a:b7:ba:b4:
c3:5c:65:2d:5b:e0:79:e6:e4:b5:5f:1b:f6:92:3a:e3:de:7e:
cf:b8:1c:4e:3a:79:55:66:27:77:2d:26:7e:f3:a5:c6:f1:6e:
58:e0:29:92:3c:f1:91:03:f2:9f:5a:b6:f0:de:4a:4e:69:cc:
21:50:ee:b8:74:87:b3:fe:7e:2a:2d:f9:1f:6c:f1:2a:53:16:
87:70:11:9b:8f:ea:40:87:a2:d2:78:47:e2:82:e7:6c:19:85:
94:18:50:fe:ed:92:a0:6e:bb:a0:5b:ee:ef:58:91:60:46:3d:
c4:58:5c:8d:37:c7:00:3f:f4:65:2c:0e:1f:b1:b2:a3:fd:9f:
80:66:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:41:58 2025 by rpki-client