Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a681f45-b163-3d64-8e38-1251e27774f2.roa
File: 9a681f45-b163-3d64-8e38-1251e27774f2.roa (raw, json)
Hash identifier: f/5hvFCeqLhHOhn9lr69l6TXXzOzTonpeW04vLahvlo=
Subject key identifier: E7:24:0E:EC:9A:D1:21:1D:CA:52:62:CE:38:15:35:C7:65:77:63:7C
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325DC1F0F6FC4C9DB755E00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a681f45-b163-3d64-8e38-1251e27774f2.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 199.232.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:dc:1f:0f:6f:c4:c9:db:75:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=590d5359-97a6-45f7-a894-ab07b417f3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:dc:c6:95:d4:94:93:4a:0e:a5:f7:9d:ee:
8e:e8:49:2d:24:21:85:64:46:6b:d4:51:4f:96:7f:
66:21:9c:85:b9:71:c8:35:ee:6c:22:b9:f2:7e:62:
13:88:34:42:af:33:8d:e9:d9:63:5e:0a:1c:04:6a:
2a:ed:bd:51:f9:82:3f:9e:fe:ae:04:a2:5b:74:45:
8c:e4:1a:50:35:40:23:37:da:33:b0:56:e6:44:ef:
e9:c6:70:44:27:64:44:14:e6:5c:56:bb:d9:4e:ce:
ef:eb:78:d0:44:8a:fb:99:7e:39:43:62:3d:c6:69:
0a:52:55:53:3f:b8:0b:78:cb:a3:b2:ed:22:4d:2b:
24:1f:d4:c4:4b:06:5e:7f:cd:46:a6:91:0d:21:8b:
7c:2e:26:28:3b:5c:ae:88:10:6f:de:eb:96:20:26:
d2:66:51:d7:38:c0:0b:8b:fd:fd:a4:9a:43:df:94:
bd:97:c0:46:b4:48:a7:f3:9c:9f:bc:8c:b5:fa:e5:
4b:2e:8b:64:2d:bd:e3:5c:db:22:ca:54:0a:86:28:
bb:0f:dd:ee:36:3e:93:e6:dc:4b:1d:3e:3c:27:37:
f7:14:a6:92:3a:8b:f1:dc:03:4c:69:33:5e:24:54:
93:48:76:a4:2c:64:c9:47:78:f2:17:e7:cc:73:24:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:0E:EC:9A:D1:21:1D:CA:52:62:CE:38:15:35:C7:65:77:63:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a681f45-b163-3d64-8e38-1251e27774f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
199.232.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:39:41:2b:fe:bc:f2:a3:01:2f:fd:1e:60:51:99:1a:33:02:
45:7a:aa:6b:a9:56:90:30:74:c1:65:77:db:30:20:31:f3:55:
c8:63:a6:5e:9b:88:ec:e7:a5:75:2a:4e:a9:e4:64:59:35:5e:
79:d9:f1:39:b5:e2:64:a5:55:63:c7:64:84:d0:d6:c4:85:d2:
5e:83:0c:26:8a:2d:c7:85:70:18:6b:b1:06:0d:2d:05:28:5c:
ce:17:76:5b:cb:bf:01:88:47:15:dd:1a:1e:48:22:d1:ed:8f:
3f:62:24:dd:ff:9e:95:02:4f:5f:b3:95:fd:ed:a2:70:eb:b7:
6e:5c:52:a7:2e:36:40:69:63:1b:09:49:06:64:29:77:e5:bd:
99:6a:e7:e9:aa:d5:b9:d4:51:e7:d0:88:4b:31:b9:08:f7:43:
e0:59:28:39:a5:4b:05:39:29:95:2b:22:ad:47:88:e4:a1:2a:
58:74:5f:33:dc:db:2d:d3:28:ba:52:eb:20:66:d5:aa:f2:ef:
02:2c:76:40:78:96:b4:81:ba:05:c8:04:bf:24:c8:f7:c9:97:
72:83:f1:98:3a:29:34:f4:5d:05:0c:5c:ca:1b:01:7f:30:52:
ff:f8:47:fc:ce:e6:9b:17:fd:73:4b:ed:dd:c7:e4:88:e8:fd:
d1:f0:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:46:43 2025 by rpki-client