Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa
File: c4cf259e-e700-3217-b9f2-8c833c86c901.roa (raw, json)
Hash identifier: DKxnwSmYhY8V2Q60wqg7LYCfTrTyeXFOEjKEjX7VmMQ=
Subject key identifier: C3:9C:63:AB:96:38:30:71:2F:6B:6C:DC:26:C3:38:FB:06:45:80:17
Certificate issuer: /CN=9ff91cfb-8c05-4ee8-9006-f7a1e162f92c
Certificate serial: 010D0C9F432858482BF557ED1BFDCF2EA340D100
Authority key identifier: 09:F4:11:37:AC:74:7E:B2:59:25:BC:46:14:9E:F9:6E:C9:B7:8A:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 8075
IP address blocks: 199.38.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:57:ed:1b:fd:cf:2e:a3:40:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff91cfb-8c05-4ee8-9006-f7a1e162f92c
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=c1fe1bef-0256-427f-82d7-256883acd370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:fe:32:4c:7d:33:37:82:e7:97:66:26:98:
e3:cc:e4:04:8d:6a:42:1e:eb:4b:e4:1a:ff:a0:00:
b2:92:f6:74:ed:f6:6e:66:91:c8:34:09:93:7e:b9:
83:f7:4d:89:46:33:82:10:38:53:65:f5:cf:0d:db:
e3:d9:6d:4a:d7:67:85:7e:c9:f1:f6:ce:fd:72:57:
af:43:09:34:a8:d2:85:bc:86:de:d6:57:92:bb:86:
3a:4d:de:83:53:f4:03:62:71:a7:16:b2:e0:61:08:
cc:87:1a:de:5d:9a:27:b6:a9:b3:37:91:be:45:d9:
a6:f3:df:f7:36:68:72:49:3e:ab:1f:e0:aa:89:92:
ce:8a:76:94:27:4d:85:78:61:a1:bd:46:7e:95:6f:
a1:bb:5a:1d:ea:ef:f3:2f:c4:cc:1f:40:93:aa:0a:
21:53:31:4d:b4:f6:d7:10:a1:c4:85:0c:05:fc:14:
8a:25:c5:53:87:38:43:b6:86:40:e6:6a:ea:cb:d3:
9d:ee:4c:89:6f:15:82:5e:f5:de:c1:6b:ae:4e:c6:
2e:10:4b:1e:13:55:a4:de:9d:1d:71:52:93:ed:76:
3f:9a:7e:27:8a:9f:69:97:e5:b9:46:d7:74:8d:57:
91:2a:f6:6b:1f:e7:6f:55:49:e0:38:55:b2:1f:0d:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:63:AB:96:38:30:71:2F:6B:6C:DC:26:C3:38:FB:06:45:80:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.crl
X509v3 Authority Key Identifier:
keyid:09:F4:11:37:AC:74:7E:B2:59:25:BC:46:14:9E:F9:6E:C9:B7:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.38.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:39:dd:fd:b9:bc:99:22:f8:e1:c0:36:17:76:ef:1c:51:c1:
f5:fc:c9:89:d9:c9:b5:3a:c5:a8:db:d5:12:e4:20:41:f0:0f:
16:66:fa:08:02:58:59:ea:a2:c6:ad:7c:82:2c:cd:97:30:ec:
65:5b:1a:7f:b1:5c:64:8d:f0:6e:82:5e:94:80:9d:cf:25:13:
67:7c:e8:3c:84:4d:f9:f8:47:e4:91:b5:93:f5:76:37:9f:97:
42:f8:98:30:f0:52:f7:51:34:5e:76:e3:de:ba:a1:bc:6e:4d:
60:3e:5e:a1:38:c5:ca:2d:85:02:32:81:c8:5c:bb:58:de:5d:
b2:8b:5b:77:b5:0f:f5:98:42:7b:64:ca:70:67:09:a2:14:9d:
36:e3:6e:67:cc:d4:28:cf:e0:1f:37:5d:8e:a3:5b:67:61:6d:
d0:2b:81:f4:b6:42:35:e4:29:79:97:57:bd:31:b0:f2:30:48:
e4:a5:59:d6:39:39:fc:9f:16:b6:10:cf:fa:89:ab:d9:86:9b:
d0:a1:58:23:6b:41:76:d4:5a:08:d9:18:cb:f9:4c:f0:be:1e:
58:f3:30:18:5e:55:1e:76:86:17:94:73:0a:78:9e:13:11:5c:
20:74:38:6e:0e:55:b8:e4:86:a3:f7:df:6d:a4:d4:dc:d7:66:
74:3d:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:31 2025 by rpki-client