Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa
File: 0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa (raw, json)
Hash identifier: 6sSPYP84zS/R3bey40qRrfuXjEX+BAyiXGK8M3oY0Kw=
Subject key identifier: 30:B1:9E:21:89:F7:B5:30:11:CF:BA:06:F7:8C:BD:95:08:A6:22:CA
Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial: 010D0C9F4328584823954B8C6067FAF613303C40
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 10929
IP address blocks: 199.193.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:4b:8c:60:67:fa:f6:13:30:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=3bd11e17-d122-42f0-b1e1-4026bd348a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:4c:79:45:6b:da:88:47:fe:68:dd:d2:6c:
15:5a:98:91:e4:9b:f7:47:cd:9d:4a:d3:3d:de:5d:
9b:fa:47:42:54:63:05:05:cd:d9:4a:3d:9b:4c:9a:
6a:2e:84:8c:6a:e9:85:1d:71:15:9c:31:6d:70:88:
0e:69:23:b3:3c:01:f3:4f:b8:fe:f2:7f:cb:56:c2:
76:ef:76:85:77:d8:17:5e:c2:7c:15:55:28:7e:87:
24:03:62:3b:55:e4:58:34:d9:b1:f4:ef:ad:11:b7:
1e:de:b3:fe:28:0d:33:c6:66:14:eb:3a:b5:35:cb:
21:56:92:f9:89:47:98:d0:99:43:af:50:0c:c5:b0:
fd:94:d6:9b:8f:b3:b2:1c:92:df:61:c0:e4:a7:d3:
90:44:fc:e7:0f:58:4c:b8:97:eb:89:25:ea:28:14:
63:3d:9d:b3:7e:cb:08:13:b0:6a:d2:b3:48:c8:40:
4a:7c:50:45:1e:47:25:97:cf:3d:ad:66:f7:a8:af:
b3:48:32:3e:53:64:27:6b:1b:71:1c:71:c9:27:0f:
f0:5a:94:52:7c:4b:1f:a9:69:92:0f:25:f1:b3:cb:
93:0a:12:cf:e9:ad:f1:9e:7f:90:9f:25:b5:b9:7f:
16:2e:06:b7:2e:94:ba:7b:1e:07:1d:e9:9f:da:02:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B1:9E:21:89:F7:B5:30:11:CF:BA:06:F7:8C:BD:95:08:A6:22:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
X509v3 Authority Key Identifier:
keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
sbgp-ipAddrBlock: critical
IPv4:
199.193.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:e6:27:da:88:b2:ee:13:f0:9f:7c:87:9f:f7:48:fb:19:8b:
52:18:ac:33:df:8f:12:ac:6f:1d:11:24:6c:be:a4:df:3c:ec:
9f:13:b8:3a:b2:7c:2e:e1:56:04:ca:d1:49:af:f6:80:b1:af:
f2:fe:52:fe:91:43:21:23:d7:54:1a:06:c2:cd:20:b9:bd:63:
93:dc:5f:d7:b8:86:03:87:43:0c:38:30:11:b1:eb:04:98:08:
f8:de:ab:7e:cb:55:9a:b6:23:03:51:0a:e3:18:53:d0:be:0d:
7f:34:5a:f1:f6:99:73:bd:00:88:3a:c1:7f:68:67:1d:e9:fd:
90:12:df:95:eb:33:1b:5f:91:72:af:cc:d8:1a:8e:31:93:ba:
37:e9:37:1c:66:bd:b6:97:0c:f6:b1:63:79:69:c1:eb:38:33:
2a:cb:9f:e2:1c:30:71:22:dc:1f:cb:90:b5:c4:fe:67:16:ad:
c9:20:63:75:5e:03:df:c0:a0:2c:db:e6:c0:4e:6c:89:7a:65:
d2:49:08:eb:e7:25:11:f8:24:34:61:da:3c:39:b3:1d:76:25:
5d:40:0c:ba:ab:7e:0a:eb:09:b7:61:78:de:ff:2b:b9:52:63:
7c:77:40:86:31:43:54:97:3f:e2:54:17:7a:5f:99:a5:86:46:
1a:dc:6f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:47 2025 by rpki-client