Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c1a3b1fc-fe60-3794-9e49-3c6ccdea27f8.roa
File: c1a3b1fc-fe60-3794-9e49-3c6ccdea27f8.roa (raw, json)
Hash identifier: UgVlVmOyfgx9PBXew1qiLZWjj7VZkcMSalhWjdRMaV0=
Subject key identifier: 08:04:AA:B0:BB:4B:BD:C8:AE:62:7E:11:42:E0:A1:08:77:75:84:66
Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial: 010D0C9F43285848530AED15E2B409534E15B700
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c1a3b1fc-fe60-3794-9e49-3c6ccdea27f8.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 12430
IP address blocks: 47.59.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ed:15:e2:b4:09:53:4e:15:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=9ca541e9-e011-4f98-822a-bb14c924c576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:4f:f0:5e:da:59:63:71:df:95:a3:72:ea:
b3:95:1a:92:7f:33:36:af:22:f9:60:5d:ea:82:f2:
b3:01:b9:d9:13:4b:9f:1e:a5:97:39:79:3a:4c:cc:
95:0b:e5:de:cd:81:7f:76:d2:1f:f7:2c:63:68:e7:
ab:10:72:77:bc:cc:e4:92:91:2e:71:c2:39:31:47:
84:af:24:86:49:82:fb:a7:41:86:b1:18:ed:18:d5:
8c:b2:fd:36:d5:21:69:da:f5:09:61:54:b8:44:3e:
16:54:20:0f:0f:f3:b2:a8:81:14:a1:39:50:14:98:
d4:29:de:cf:9c:b9:a4:62:0c:3d:f6:49:bc:a4:54:
88:f4:a2:fd:9b:8e:3f:65:f0:d3:85:c8:76:a8:ca:
46:d5:97:f3:13:4e:95:75:7e:51:23:4a:b5:fb:7d:
64:7e:02:18:13:61:af:4e:5f:e2:5f:bb:31:83:d8:
ea:6f:a9:ee:08:d0:32:81:67:ab:56:19:c9:07:35:
07:d0:50:22:54:73:3c:8f:fd:72:26:5b:51:20:e4:
8d:23:73:30:ee:53:21:6c:99:73:57:65:c1:1d:e1:
7b:00:fb:f8:55:04:d7:04:44:18:66:e8:d0:ff:bb:
04:0e:0f:d0:8a:75:b0:05:62:ca:ea:77:3f:2e:cd:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:04:AA:B0:BB:4B:BD:C8:AE:62:7E:11:42:E0:A1:08:77:75:84:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c1a3b1fc-fe60-3794-9e49-3c6ccdea27f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
X509v3 Authority Key Identifier:
keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
sbgp-ipAddrBlock: critical
IPv4:
47.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:2d:26:61:e0:ab:d6:ee:e3:24:c7:7c:4d:4d:ae:af:4b:31:
bb:71:f4:c4:82:f1:a1:b9:ff:b3:02:4d:5f:4d:a5:bc:d6:a0:
27:53:82:19:a8:87:2d:5a:ef:89:b0:04:ff:36:c8:99:26:18:
6a:d1:d3:cc:12:0f:0c:74:11:e1:d6:d3:29:b3:d1:88:bf:87:
79:3d:28:aa:c4:3b:06:6a:25:b6:15:53:25:e6:09:11:19:c1:
23:9c:aa:bd:29:7e:ee:c9:ac:3b:fa:a5:24:05:ee:b5:e3:3c:
7c:5b:9c:50:66:1b:a8:9f:c9:fc:59:4d:8d:7a:80:cb:0c:84:
47:cc:eb:5d:84:b2:ca:60:5d:41:94:76:5d:b8:8c:1a:f8:29:
7d:a9:e6:f7:cf:43:bb:70:1a:82:92:f3:bb:c7:03:5e:b5:28:
7b:2b:14:26:21:6e:f7:c9:a0:1b:fa:05:ae:86:f4:83:16:e8:
b4:73:16:90:0f:09:41:d3:79:0a:cf:56:da:2c:d1:af:1d:36:
e1:a3:0a:1f:50:69:8c:52:65:50:81:fd:5f:47:7b:8e:20:2a:
fb:93:7f:f2:79:b2:af:80:bd:3b:ef:3c:9b:09:dd:85:2c:94:
36:69:3f:6e:24:88:c4:0b:6f:b8:c1:68:80:d9:10:bb:08:be:
ed:4b:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:00:11 2025 by rpki-client