Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa
File: 7fafc48a-67c4-3f2b-b12b-26df3b394690.roa (raw, json)
Hash identifier: uz2GPx4rm348sjbBjGHSaY76sdGmzqLpvXQXyByslhU=
Subject key identifier: 64:80:5F:55:CD:5E:D4:AF:FC:5F:24:75:C2:D9:FF:8E:F6:6E:B8:AB
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858486C2B3324A7CB268192DCF940
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 54858
IP address blocks: 199.127.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:33:24:a7:cb:26:81:92:dc:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=538ee331-832c-409d-86d7-8e93b460ce54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:34:b2:45:17:2b:fc:f5:f6:83:a3:01:df:2a:
3e:83:3a:eb:d7:14:7c:6a:1a:d5:69:ac:c2:fb:28:
79:8b:5d:2e:f8:d6:d5:15:3a:b7:00:80:34:f1:50:
cc:75:ac:e6:02:47:c9:c2:e6:8c:84:c2:f2:b2:a9:
3f:c2:c0:3a:1c:18:05:5c:4b:74:d2:34:ae:11:b2:
75:02:7c:b6:c5:9e:ba:ba:f0:11:7e:03:c9:9c:40:
2f:92:6e:93:c2:78:3c:61:d5:23:34:2e:bb:7f:e3:
5b:a5:ee:7f:af:2f:a7:50:bc:78:96:9c:2c:ac:de:
16:04:0c:5b:0d:cf:39:4c:07:9c:96:e7:7f:dd:ba:
bf:29:a4:b7:1f:87:c0:58:13:f5:9d:d3:79:fe:4f:
bf:89:cb:68:41:34:ec:cc:fb:bf:0d:b9:75:4d:c1:
df:45:a4:86:8c:c3:fc:7a:ca:16:27:45:f2:b0:8c:
20:04:2b:c6:05:d1:ab:26:3e:94:97:0a:60:cd:db:
e1:6e:0f:f2:ac:76:4b:e7:51:11:61:37:5c:78:d9:
57:3d:3b:3f:b1:f6:df:35:8f:db:5d:dc:36:0e:47:
e3:ab:20:8a:e1:f2:e4:03:65:f6:69:42:6a:de:26:
62:0d:fb:e2:39:d9:b9:cb:b8:32:bf:ae:0f:5f:72:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:5F:55:CD:5E:D4:AF:FC:5F:24:75:C2:D9:FF:8E:F6:6E:B8:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
199.127.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:df:7f:74:2f:41:4d:f7:3c:41:8c:72:2c:de:88:b7:d5:26:
22:e0:93:e4:e7:7b:de:23:ba:ed:dc:40:57:58:f4:04:fd:22:
aa:33:62:d6:f9:cf:56:86:55:7a:fc:30:43:dc:c6:9c:a4:6f:
03:dd:97:fe:b2:ff:fe:cb:4b:df:48:3f:da:30:bb:f0:c1:75:
39:f4:e2:67:53:c6:93:c0:bd:22:99:47:5c:0c:3e:86:db:48:
e2:a4:b1:dc:bd:7e:da:c6:92:8f:7f:43:53:83:77:e2:df:cb:
ee:24:65:d4:56:ff:24:0a:f0:55:10:51:95:03:2f:a9:6f:f7:
fc:18:89:3c:fe:19:e5:08:7d:59:f4:bf:50:49:76:51:8a:95:
57:40:1e:17:76:0d:0d:1a:c3:e7:b9:5b:7e:67:43:7b:c2:7d:
4f:c9:00:4a:af:72:35:89:f8:f9:0b:3a:cf:bb:79:6d:10:9e:
6b:88:57:26:62:ab:ea:04:5b:fc:53:0c:76:3d:0a:4e:e6:78:
8e:81:e5:fc:34:e5:5d:17:b0:e4:a9:c7:2e:93:61:17:70:57:
ef:6c:bb:5b:1b:a7:4b:30:67:d0:2f:8a:6b:a2:f1:47:6c:3b:
f1:cd:30:31:c7:26:3e:88:c1:97:a2:b4:d3:56:29:90:1b:35:
77:ee:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:53:26 2025 by rpki-client