Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa
File: ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa (raw, json)
Hash identifier: fvFwiaQUY5QBSIbqLhHG5jhKomnmvd7+NXTBS1zkPGE=
Subject key identifier: 46:CF:DB:DB:E8:3F:1F:31:C6:0F:E1:2E:96:2E:A5:B6:B4:16:11:F5
Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial: 010D0C9F4328584858A05C049707C7BC2D37B700
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 6079
IP address blocks: 172.99.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:5c:04:97:07:c7:bc:2d:37:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=f0a09581-990e-4469-a055-60538420ac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:83:a5:87:a1:4d:d9:9b:ed:c8:1f:ca:85:
10:3c:f6:94:7f:e5:2c:00:c4:0e:47:79:be:84:e8:
ba:fd:d8:c2:50:e9:86:b1:ea:00:83:5c:b5:e0:5a:
a4:a0:2a:f3:9d:2b:63:67:5a:af:57:d7:37:62:43:
c7:8b:ce:71:a7:dd:5e:b5:84:a4:ec:30:99:84:87:
f9:8d:39:f6:f9:85:4d:8b:90:14:61:98:00:5f:c1:
43:c0:2d:ed:98:b0:06:8c:9e:11:76:6c:11:df:c5:
73:a7:eb:8e:96:ad:5e:9c:50:bf:ad:10:63:4e:0b:
34:16:f1:8e:20:73:35:02:9a:a6:23:02:15:f9:a1:
17:00:40:13:9d:ff:20:cf:3b:2a:a3:1a:de:b5:30:
17:41:ab:8c:62:80:2f:77:c4:13:a9:74:f7:99:6d:
d4:f6:b1:65:85:98:55:70:41:6d:c8:71:ba:5d:8e:
f7:56:27:65:88:27:ca:75:0b:a5:b8:11:31:98:fe:
fd:e7:5f:5e:fe:2e:ee:22:2e:f6:5d:f1:ca:b8:b5:
45:c6:24:a5:aa:80:9c:85:ec:b2:a1:57:3a:c3:2d:
4b:ce:7e:b7:08:48:f6:43:46:ad:0a:7f:3e:e3:00:
4c:7d:5a:ed:ed:83:2a:30:d6:a7:e0:13:c5:59:1c:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CF:DB:DB:E8:3F:1F:31:C6:0F:E1:2E:96:2E:A5:B6:B4:16:11:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
X509v3 Authority Key Identifier:
keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
sbgp-ipAddrBlock: critical
IPv4:
172.99.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:93:a7:e2:cb:58:b2:74:a8:0e:82:ce:1d:ef:21:0d:fb:65:
d8:3e:01:54:cd:73:9f:3b:08:8e:86:42:3d:4b:b9:45:e1:8f:
4a:94:65:91:df:a3:51:4f:11:de:6e:d9:d8:4b:ca:b6:13:2e:
d4:fb:2a:e4:87:e8:f7:25:98:29:04:01:fb:10:94:50:e9:42:
90:43:d9:d9:bf:f5:a8:04:72:be:60:5f:7f:cd:bf:de:4a:71:
7b:01:f6:4d:4d:0c:0b:20:ca:e5:27:d5:87:ca:4f:13:e9:86:
4d:f1:b2:e6:0e:55:69:53:36:e8:b5:5e:ef:6d:30:87:03:9c:
e3:68:69:31:d9:b3:64:9a:79:43:fc:c8:db:1e:b1:54:51:c5:
97:b1:c2:63:39:8a:b5:2e:c0:6c:23:93:90:9f:32:32:ab:ff:
c7:7b:11:cd:53:10:b7:7f:ae:19:c5:c7:fb:06:4e:7c:73:8f:
ca:b0:7d:db:39:d8:52:35:9a:1e:7d:20:fa:b0:bf:46:00:08:
5c:fa:72:36:73:82:26:a4:e6:a9:c1:78:c4:2d:f2:c9:37:24:
2e:c4:32:ab:eb:bc:45:dd:d3:b4:cc:8a:24:2e:01:5a:e6:a8:
a6:cf:f6:ee:c1:0d:71:55:4c:5c:b1:29:63:c0:d1:f6:4b:c2:
50:8d:9a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:59:51 2025 by rpki-client