Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa
File: eba41c2b-e525-336c-96e4-eac49ea4d832.roa (raw, json)
Hash identifier: Qd3xLVxTjf3l6uK2snaZqMDyuPKmb0GGca4qcukuZj0=
Subject key identifier: B2:5D:AB:0F:BB:59:3A:6E:33:7A:02:C3:58:77:F3:C3:25:6D:87:1C
Certificate issuer: /CN=ac717083-6970-4d32-8573-0bfa89700c9e
Certificate serial: 010D0C9F432858484515939E4ABD3D7088CCFD20
Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 802
IP address blocks: 199.212.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:93:9e:4a:bd:3d:70:88:cc:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=506ff85f-f0e9-48f2-b7e8-1259357e7f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:2b:a7:23:86:99:0b:dd:9e:60:a8:3d:55:
5a:85:2c:cb:ef:4b:fa:2e:50:2e:5a:9e:d2:1a:a2:
f3:92:9c:03:0c:30:67:b8:37:03:dc:5e:5e:e6:56:
2d:f7:40:c5:03:98:d0:1b:06:ff:a7:62:49:60:d8:
d3:c3:be:dd:c3:1f:10:e2:46:00:8d:c8:35:79:57:
34:a6:04:ab:46:4c:c8:25:35:93:0a:ed:b1:d8:64:
dc:1d:f5:bb:63:8d:32:11:7b:fb:61:da:57:35:8a:
70:ed:f8:e7:b7:db:06:e7:19:15:24:49:0a:ab:2d:
53:88:9c:18:ac:c0:1c:7d:7f:f0:c3:26:16:11:96:
5f:1b:0a:0f:0f:87:ed:5c:c1:d7:02:43:1c:92:49:
3f:14:0a:2a:b5:15:95:bd:84:c1:3b:d6:06:99:0a:
3d:e7:0b:d5:ae:13:7a:17:ac:f4:0a:71:7f:85:b6:
83:62:8c:48:75:ca:2b:ec:40:b9:4c:f7:52:da:b9:
9f:76:31:64:8d:88:0a:85:aa:51:9d:53:ce:33:ae:
65:ce:35:01:f6:5b:4f:44:dd:90:05:4d:fe:a6:97:
44:e5:c5:1d:e9:79:92:e5:27:0b:e8:97:b6:e4:45:
4b:1b:25:07:59:9d:59:f2:b9:59:a2:0b:20:aa:97:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:AB:0F:BB:59:3A:6E:33:7A:02:C3:58:77:F3:C3:25:6D:87:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl
X509v3 Authority Key Identifier:
keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:27:bd:48:9e:fe:ba:6f:20:34:4a:f1:38:77:27:a3:5f:55:
1a:7a:02:5a:dc:15:fc:ff:87:69:04:e0:dd:11:3e:cd:ec:b8:
ef:d7:cb:c9:53:d1:b2:c1:3d:1a:b4:e8:40:3d:5c:54:05:12:
79:cf:d7:09:9d:12:e0:c9:18:4f:8c:1f:a4:68:84:4c:80:08:
ef:c7:86:57:ab:d6:79:16:34:af:d1:30:8e:14:ee:cb:f0:36:
ed:57:87:1d:cf:63:2c:c8:7f:56:65:4e:c5:42:80:8e:af:71:
65:dc:14:d5:68:28:e6:57:72:bc:c5:4c:71:fc:74:f9:d2:f1:
c7:cf:42:e2:7e:fa:d8:a3:f3:fe:0e:b1:fc:e4:9f:00:1f:fd:
54:3f:1b:f8:f8:9b:d2:bf:01:a7:55:cf:98:c4:54:7a:1a:0f:
00:89:bc:33:24:4f:5c:5d:38:4e:71:7a:95:56:c1:d3:7d:98:
42:e6:83:f6:2c:ad:51:df:f2:6a:25:41:ef:bd:a2:ea:46:16:
17:d3:ae:c9:3a:ef:e5:86:67:94:a1:ba:65:77:b2:f5:a1:50:
68:58:68:21:a5:20:77:f7:6f:ac:40:e1:68:e9:0d:93:b7:15:
a4:53:14:eb:4c:3a:70:25:ab:b8:26:1b:ac:94:36:6a:31:70:
3d:df:21:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:43 2025 by rpki-client