Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa
File: de8c254d-a582-3b01-9da5-fc1d49739f37.roa (raw, json)
Hash identifier: srh7zKel5I9unATpSOzSH83/kqS3SqV6Inmq6lOtAtQ=
Subject key identifier: 19:BD:4A:35:D0:AD:46:CB:66:F6:5F:0A:E5:87:77:30:B7:AB:B8:C9
Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial: 010D0C9F4328584824FA83D13F81EECD8540EB00
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 394625
IP address blocks: 199.38.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:83:d1:3f:81:ee:cd:85:40:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=6c4ae438-ad43-467c-b44e-19799d7eb3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:3c:30:ae:f9:e9:fd:09:14:ef:6f:c8:ec:
ba:e5:42:02:44:ef:e7:a4:7c:9b:e5:80:b5:c3:18:
aa:97:81:bc:11:d0:27:7d:14:61:a6:37:7f:38:19:
2b:78:2a:4a:3c:99:aa:a8:7a:53:2a:5f:7d:8b:a2:
1c:38:9c:6e:16:ef:d0:70:b2:ad:37:cc:84:2c:cd:
f8:4e:fa:3e:f8:ef:ee:06:00:f0:bf:b4:0f:38:bd:
28:36:59:30:63:b0:42:1e:38:91:8a:69:7f:b7:d6:
ac:63:f8:5e:e0:45:c1:f4:48:9a:bd:3e:c4:08:7e:
07:19:9c:ca:75:41:ec:0b:7d:a2:7f:aa:c8:d6:dd:
36:22:84:c8:ef:ee:ec:fc:8c:d0:ce:c2:07:93:53:
6a:38:48:0b:5b:30:3e:d1:24:56:d5:7e:ed:8c:02:
f9:3f:20:0d:87:da:fc:1b:69:6c:52:2b:e1:bc:e3:
0c:6c:5d:53:25:46:4a:58:b6:34:12:1a:4f:13:88:
90:6d:98:5e:67:e3:73:dc:fd:66:1c:8c:c9:2b:30:
2d:7e:0c:5c:5b:dd:bc:dd:65:cd:27:63:bb:ce:be:
18:56:2c:e2:d5:11:ef:81:af:e8:9e:6e:4b:46:ff:
90:be:eb:12:01:ee:fe:e0:d0:12:30:1a:f9:be:63:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:4A:35:D0:AD:46:CB:66:F6:5F:0A:E5:87:77:30:B7:AB:B8:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
X509v3 Authority Key Identifier:
keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.38.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:21:4f:42:a1:33:2e:ac:8c:80:53:d5:45:89:e0:ae:f6:09:
b0:29:ce:15:0d:0f:03:2c:3b:e0:25:db:87:cd:94:6c:ee:e1:
c3:67:86:e4:8c:ee:d3:80:d8:58:6c:dd:4a:92:cd:7f:76:c5:
07:00:ce:08:20:c8:f9:2b:e8:fe:0d:de:4a:d9:70:a3:89:5c:
a0:86:cb:21:09:11:e6:99:fe:e7:94:f5:28:cd:94:8b:56:59:
e3:01:d0:4b:af:1e:9e:e7:b2:5f:f9:e2:64:b8:95:38:15:cf:
af:64:d8:2f:c3:e6:1f:b1:04:d3:f8:70:82:3f:f7:04:f6:8b:
6a:be:c4:86:88:9e:25:e9:7d:a1:14:83:af:b2:1f:60:93:46:
bc:ea:72:a9:d1:e5:68:43:d6:ff:6d:e9:d3:5b:d5:6b:ca:c0:
ee:59:71:76:a3:92:93:ff:d2:a0:8c:d8:3b:44:98:42:03:35:
1a:1f:63:db:54:de:b7:f3:4e:86:f8:de:de:5f:12:77:3a:e8:
cc:7d:fa:95:46:73:cc:0b:25:5d:ae:af:62:56:6b:12:03:3b:
e5:64:ce:be:2f:c2:dd:d2:ad:32:36:3e:53:57:01:d3:fd:60:
19:dc:2c:7d:94:c6:80:ca:69:f9:83:34:ea:ed:44:9f:ac:d8:
b7:d7:6f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:52 2025 by rpki-client