Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/ec248683-6ef1-3211-9a3f-8ed26d34a7a1.roa
File: ec248683-6ef1-3211-9a3f-8ed26d34a7a1.roa (raw, json)
Hash identifier: pYXS2mOi7yRy48jA8sl3bM2/vTnzHYsmmtr9KA5JUg4=
Subject key identifier: D9:73:BA:D2:8B:FA:F5:6B:C5:ED:3B:71:5F:50:27:55:F9:6E:45:ED
Certificate issuer: /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial: 010D0C9F432858480EA516FAE9E0B4328C9B0B00
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/ec248683-6ef1-3211-9a3f-8ed26d34a7a1.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 19471
IP address blocks: 199.47.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:16:fa:e9:e0:b4:32:8c:9b:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=a1db9cf7-653d-4a24-94ea-2576b2db2056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:1d:06:33:09:61:f2:c9:19:b8:a8:39:7f:
df:f3:a5:cf:e1:f7:27:32:65:27:de:00:9d:10:dd:
57:ba:84:2d:5e:51:d4:b4:1d:c0:1c:e4:2d:8d:5a:
e7:c4:71:28:14:2b:84:43:f6:b8:e1:52:be:30:28:
0b:6f:ed:cf:e8:4c:88:8b:7c:be:aa:a0:08:f4:e2:
5a:a3:66:dd:5e:e4:b8:3e:22:db:f2:50:70:42:8c:
1f:f8:77:2e:e9:94:e5:c0:30:00:32:36:14:84:c4:
f1:10:05:7f:34:d1:db:79:de:6d:6b:7b:49:4c:78:
d5:d3:6d:87:58:55:ff:5e:84:41:be:73:9c:37:74:
bd:c9:be:36:28:89:4e:49:13:64:67:53:fd:3a:46:
cb:7c:59:1e:fd:8e:24:c0:cf:40:60:d4:0f:8e:df:
42:01:b5:d7:e6:27:83:a3:09:d9:77:84:7e:83:85:
bb:a6:a4:b9:1d:ea:14:76:bf:79:99:b0:84:1e:2c:
f7:a4:05:68:df:6b:51:94:a1:2f:97:49:06:ec:0e:
fd:6a:d1:ad:67:6e:43:30:93:61:1a:2e:87:8a:d5:
8e:a8:d4:ef:cb:ee:77:85:ec:6f:98:4e:97:6c:b8:
3d:8b:4d:5f:54:b0:d8:4a:3e:ec:ee:89:f8:46:f8:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:73:BA:D2:8B:FA:F5:6B:C5:ED:3B:71:5F:50:27:55:F9:6E:45:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/ec248683-6ef1-3211-9a3f-8ed26d34a7a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
X509v3 Authority Key Identifier:
keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ef:a1:16:0b:dc:c2:f5:98:60:99:69:61:e9:19:d7:28:8d:
f2:cd:31:b8:84:70:40:0a:2b:02:d4:50:89:3e:2b:ce:35:ad:
65:cc:59:ef:6e:1c:20:a9:ce:11:1e:c3:a0:a5:89:74:e5:3b:
3b:77:92:f5:d5:4f:34:48:ab:cc:fa:1f:33:9b:8b:41:90:4b:
e5:00:19:b2:8e:63:bb:87:e2:02:94:4d:ff:a9:b5:92:77:99:
26:64:64:81:b3:cd:50:f0:21:fd:00:74:54:d1:00:88:95:d1:
19:b6:bd:59:d7:8d:11:03:2d:a1:ed:42:49:00:96:d4:5a:43:
dd:39:44:3a:9f:d2:df:1d:26:09:ae:c6:84:ab:ef:88:c7:c7:
e5:50:54:04:29:0c:59:21:7f:6c:aa:4f:6c:6b:a4:ab:a1:66:
66:3d:be:61:4d:42:b6:86:22:ee:81:3b:09:c1:a2:b7:02:1c:
5c:7e:bc:32:a7:b9:b0:be:6c:fd:42:33:f1:07:fb:fa:f4:5f:
e9:4b:d5:53:d6:ce:04:4e:70:21:38:b5:c8:48:6a:ad:95:50:
bc:91:87:84:04:2a:cc:66:9b:d9:c1:05:be:7a:0b:c3:39:ff:
b6:e4:64:91:49:d7:44:b4:39:15:57:1a:0a:0d:48:3c:d1:bd:
08:94:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:43:57 2025 by rpki-client