Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa
File: c23ac558-69f5-3c92-9a4a-e12e37e77616.roa (raw, json)
Hash identifier: +FArX9IGgkO48XwDC5BmDDA0Wm/U8TJNOgSaZuF1PG4=
Subject key identifier: BD:53:66:27:F3:F8:EF:20:8C:A8:90:AA:C2:01:F9:41:74:12:04:E1
Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial: 010D0C9F43285848222FDB27B2820C6F51941700
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 14297
IP address blocks: 199.189.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:db:27:b2:82:0c:6f:51:94:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=6c8cace4-4870-472a-8440-7717d59d6f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3f:bb:5f:54:38:07:19:fc:35:8e:61:17:c7:
9c:1a:ff:5e:8f:c6:d5:dd:91:fd:aa:b0:92:8b:d2:
3c:ac:3b:a3:a5:81:e4:6e:e6:2d:a7:7c:5f:2e:5d:
a8:9b:e4:39:53:95:28:58:a4:72:b1:78:b5:34:8f:
77:17:e4:4e:b7:0a:2a:5f:67:96:cd:f8:fa:c3:e5:
e7:04:ee:2f:62:1f:12:e5:6f:e5:e0:c3:5c:ca:4e:
06:ec:5b:95:02:70:f5:f8:86:0d:9b:04:10:00:e7:
38:cd:9f:14:a7:c5:04:1e:01:65:e9:8e:07:e2:35:
55:cc:49:9b:c8:22:4c:ef:b1:77:ea:3f:fa:a0:b9:
4c:26:d4:09:ce:ff:53:b5:32:01:5f:67:ff:ed:18:
ae:bc:c8:99:e5:d3:8d:bf:bf:ff:1b:b3:e6:72:81:
9d:74:e5:d6:25:e7:df:65:11:e1:31:c4:d0:00:52:
4e:67:9e:95:f7:66:48:c6:00:35:cd:df:5c:29:61:
53:4c:8c:4d:fb:92:b5:18:d0:5b:93:f7:5e:f1:c6:
11:fb:4b:27:b6:ed:80:51:47:d7:94:35:51:ea:53:
9c:65:9f:cd:11:63:9f:72:60:bb:ae:cd:07:82:90:
a5:55:85:db:63:ca:72:de:66:ac:40:5f:bd:16:8d:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:53:66:27:F3:F8:EF:20:8C:A8:90:AA:C2:01:F9:41:74:12:04:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
X509v3 Authority Key Identifier:
keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.189.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ca:5f:af:aa:88:29:07:dc:b1:e5:db:ce:56:56:30:f9:f0:
48:af:8d:b4:93:27:f8:b1:ff:3e:f3:33:a7:70:9b:c2:02:4d:
a4:ba:a0:42:79:5c:e8:a1:81:50:03:5d:a5:22:70:fc:f4:87:
f2:cf:66:56:91:bc:56:f9:fd:04:c1:10:98:11:12:25:e1:75:
25:11:c3:b5:15:8a:59:42:b4:2a:6d:a4:09:19:c8:f8:a2:03:
96:be:93:6e:3e:48:e7:73:91:41:ad:a2:4b:49:16:d7:74:df:
33:3d:57:5d:d7:ae:3a:d0:7b:70:76:62:2c:2f:b8:c1:77:c9:
0f:33:2b:26:6d:15:1f:bb:25:95:9f:0a:2a:c4:9e:94:68:f4:
d7:96:fc:9f:96:25:df:4b:dc:85:a0:b9:eb:43:e6:3c:00:dc:
43:a4:ed:1e:9c:6b:66:49:9b:53:93:75:4c:da:7f:e1:68:9d:
85:49:fd:34:a4:5c:f8:df:57:75:63:fc:e3:ba:2a:67:97:2e:
b3:ad:4d:1a:86:20:7e:6b:3e:02:32:6b:07:3e:6e:cb:78:e4:
a3:91:2a:17:55:c6:fc:42:27:fd:67:34:ba:0d:d9:96:c8:09:
24:13:4a:d1:b0:53:4c:a5:71:0f:07:ea:79:2a:70:2d:3b:e1:
ca:8e:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:52 2025 by rpki-client