Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa
File: 67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa (raw, json)
Hash identifier: iUCzFevrNQFS7XovO+S+dYT9tv8+6w8zLLMTVxRblcs=
Subject key identifier: F7:2A:50:3B:3B:9F:B5:9F:0E:D0:81:3D:27:52:36:5D:4E:AC:E7:F3
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858486C2B335B6AE8102757D4C8C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 54858
IP address blocks: 199.59.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:33:5b:6a:e8:10:27:57:d4:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=2974969e-2243-4e3b-81ba-15d18710bf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:e1:b3:a6:58:69:07:e3:db:cd:24:03:c7:
c9:8d:f3:42:3a:41:5a:ce:93:b1:bd:e3:00:70:09:
bd:43:31:32:f7:18:f9:f3:c2:8b:6d:74:77:b0:df:
9f:58:07:33:95:d3:84:bc:cc:03:ae:4f:d7:a6:f6:
cd:65:99:e3:01:e2:59:94:0a:6a:28:df:1a:38:10:
0e:e7:f5:16:23:4a:2e:64:4e:f3:e5:fb:cc:fb:aa:
d2:e5:4c:6d:43:98:a8:a0:c0:ae:25:04:7b:63:25:
16:7c:a3:c8:6e:8f:63:3b:60:65:e0:93:78:dc:ee:
04:55:b4:f0:24:2f:17:be:90:4b:ae:dd:53:b5:77:
20:c0:5a:69:d7:b3:11:cd:42:43:ba:72:62:b7:da:
86:f3:f5:f3:12:f6:7d:16:e3:a9:f1:27:6f:a1:69:
c4:7a:f2:17:f2:8d:f3:dc:61:f4:87:62:fb:9d:ed:
ab:d7:81:c2:1c:7e:c4:d0:24:4f:1d:9a:1c:33:f1:
11:08:37:2b:c5:a7:62:ca:a5:e1:05:02:71:1c:9b:
04:37:69:18:d2:42:3e:ae:f2:d8:84:bf:b2:48:a7:
86:0f:af:8d:94:95:f7:60:91:01:a3:69:f0:00:84:
57:77:19:e9:cd:1b:12:b8:9a:49:b3:76:0f:14:fd:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2A:50:3B:3B:9F:B5:9F:0E:D0:81:3D:27:52:36:5D:4E:AC:E7:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
199.59.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:01:54:33:6a:4f:ee:91:66:6b:46:50:5e:d1:bb:57:3e:e9:
4f:64:89:ce:61:6d:23:69:6b:1f:2a:09:f1:34:d0:e5:84:39:
88:f4:94:cb:45:83:32:24:fd:58:85:5f:d7:df:19:11:86:09:
38:47:2e:a5:10:9e:52:bf:f1:74:66:1b:76:b4:6b:99:40:67:
b4:d9:dd:66:17:0f:3d:a6:3b:0f:57:7a:fb:4c:e6:85:3f:00:
4b:c4:81:42:99:e7:c9:00:05:97:14:db:ff:13:38:ef:09:10:
89:b2:34:89:2e:49:f2:49:90:80:a5:c5:fa:28:b2:88:62:08:
42:a0:f6:c8:d3:01:7b:79:0a:ea:4c:9e:0a:74:3e:85:32:ad:
e0:c0:a1:5b:9f:ca:28:e6:7b:0a:19:65:ea:6f:3f:b3:d6:7b:
4d:fd:7d:ca:93:c5:87:70:36:7b:c7:6a:7d:cb:9b:95:fd:ed:
6e:85:88:67:8c:6d:6f:8a:8a:0a:58:78:f0:29:1b:c6:6b:99:
92:a7:ec:6c:6d:83:3f:f7:62:0d:b2:83:19:7f:f1:09:69:67:
5e:65:04:73:1c:70:7f:45:89:a0:fe:c4:56:3f:5b:05:3c:dc:
d5:c0:22:cd:ba:fa:5c:cb:17:89:7a:71:01:58:f8:32:75:26:
59:5e:06:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:49:43 2025 by rpki-client