Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa
File: 23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa (raw, json)
Hash identifier: ODtbVG7Qqxh8yrf7Z7gSmmSkAM90S2u5w/Nji19CnFY=
Subject key identifier: 0B:80:85:78:67:4C:D2:A6:0E:57:1E:08:6B:39:FD:C6:05:80:0C:28
Certificate issuer: /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial: 010D0C9F4328584858A04F58A678D0AEA2CAD720
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 394161
IP address blocks: 199.120.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:4f:58:a6:78:d0:ae:a2:ca:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=0904abdf-a3e0-4c75-a203-5e0eab37ffe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:b1:d2:f7:08:44:66:26:83:97:1f:cb:f6:
f2:2f:92:62:91:55:40:ac:cf:49:cd:ce:12:74:0b:
96:d1:f1:07:f4:41:01:a2:7e:dd:a1:ab:1e:c3:de:
d6:0b:20:32:67:2b:19:81:ca:17:2d:c6:b4:e3:97:
a7:01:d6:a0:b7:2c:92:1e:ff:ec:c4:f8:0e:a6:b8:
b2:bf:62:ba:9d:99:bb:fe:fa:fc:29:e6:52:99:ce:
af:29:dd:29:8a:a3:08:35:9a:50:74:4e:33:34:23:
58:e5:0f:1e:c5:fa:a4:f8:89:a4:7e:2c:43:87:5b:
bc:4b:29:48:2c:f3:df:e8:0c:d1:f3:3d:22:f8:a0:
b9:60:97:40:b6:3b:c9:1f:24:b1:18:b7:50:fa:2e:
9d:0c:0d:2b:ab:b4:ca:88:ea:f0:13:ad:6e:e8:23:
f1:59:ff:80:bc:63:2b:d9:8a:c8:2d:ac:d0:45:ba:
9a:b0:3a:77:9e:6a:11:2e:27:7b:9b:91:26:26:fa:
15:45:c1:59:a3:14:a3:bd:07:1f:bd:b8:21:e6:c7:
fc:32:1b:bb:ce:db:44:64:a8:86:44:de:d8:6d:ee:
39:ba:5f:3c:92:b5:ff:21:27:92:36:de:e0:64:1a:
96:e3:70:85:a4:73:a9:1e:8a:54:15:f1:ba:65:aa:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:80:85:78:67:4C:D2:A6:0E:57:1E:08:6B:39:FD:C6:05:80:0C:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
X509v3 Authority Key Identifier:
keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
sbgp-ipAddrBlock: critical
IPv4:
199.120.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:47:78:da:e2:62:f6:d3:97:db:3d:72:34:3e:4f:f7:8d:49:
01:77:a3:3f:d6:9f:c3:3a:7f:70:16:ee:08:09:35:9d:48:11:
fa:4b:00:df:51:3c:f8:63:60:a0:ef:4f:3e:90:4c:30:24:d5:
62:71:65:15:e1:b1:66:e7:5a:47:08:20:ca:a3:e2:35:73:4a:
fa:72:96:e0:9d:f5:3a:34:4b:22:c2:82:0f:98:63:66:01:bf:
84:5f:60:c6:71:ed:64:ea:02:2c:40:82:a2:05:f7:e3:4f:8d:
bf:75:9d:66:eb:f1:5f:13:9c:05:b4:b4:d5:ce:fe:2f:f4:fe:
f0:68:7a:21:43:e2:6f:b0:9e:80:53:cf:92:48:ef:78:e5:40:
41:21:79:84:e5:79:39:3f:9f:0a:94:97:4a:10:aa:a6:1f:d3:
6e:13:cb:71:5f:0a:61:e9:17:dc:2e:57:de:ef:0d:6e:5e:25:
6a:21:35:9b:ee:d9:31:78:7d:4f:ab:5a:96:d0:cb:87:38:1b:
cd:f7:24:81:9b:90:00:e1:79:79:bd:95:b6:ea:cd:37:f7:10:
c7:4a:9d:7f:7d:41:98:7b:84:ef:1f:7c:18:19:c7:a5:de:67:
35:9a:bf:3b:07:d6:ee:12:51:2d:8c:41:88:95:65:2c:52:ee:
b9:ce:b9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:07 2025 by rpki-client