Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a804fe1-a4aa-3daa-98c1-6e4128a1812d.roa
File: 9a804fe1-a4aa-3daa-98c1-6e4128a1812d.roa (raw, json)
Hash identifier: imYV9h0Jc4mAi43NxO7+3yxXlHdyS21W5tUECiCl/6Q=
Subject key identifier: C7:40:C3:83:42:B6:38:C5:24:89:94:E3:D4:B1:5E:62:05:35:0C:35
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325DD2D038E278F01C24BC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a804fe1-a4aa-3daa-98c1-6e4128a1812d.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 199.232.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:dd:2d:03:8e:27:8f:01:c2:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=0159dae3-dabf-48eb-bebf-155f9c39e9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:25:9e:aa:c0:6c:9d:d7:89:47:4c:41:1b:
48:88:51:9b:24:97:fe:98:2d:af:6e:0e:3d:78:b1:
04:13:21:14:ac:1c:79:d4:2a:84:08:6b:18:14:c0:
4e:95:2b:c6:f1:90:64:ab:97:58:e9:df:4f:b7:23:
ef:55:dc:45:94:bf:54:cd:65:e7:3d:e1:51:37:cd:
11:3f:e2:21:7b:fb:ee:97:cc:04:7c:a5:08:ae:7f:
2d:ff:96:64:94:28:e4:75:d2:f8:30:3d:25:5b:41:
7b:1f:05:27:77:9a:fc:50:e0:21:db:b0:5d:3c:ad:
21:d3:a2:5c:33:7d:0c:87:01:49:b5:84:25:c4:4d:
0b:f6:5c:e7:eb:c0:d6:0f:71:9c:df:3c:13:2a:6f:
38:fd:a8:e8:21:8e:e7:1d:62:14:c1:d2:de:4b:a7:
a8:d4:e3:bc:d0:53:7c:14:d8:67:ba:08:b0:6e:e2:
d6:75:56:42:d4:34:11:ac:be:ff:ae:53:a3:7c:0e:
e7:3e:96:52:53:22:5a:c6:6c:e2:f1:66:86:47:2a:
ce:36:3e:a3:85:84:01:57:b4:a1:59:d2:07:fd:de:
34:53:7e:d8:b1:73:68:2c:b8:8d:c2:11:b9:4d:73:
7d:95:59:f8:e7:27:24:20:89:1c:37:22:9f:8d:b6:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:40:C3:83:42:B6:38:C5:24:89:94:E3:D4:B1:5E:62:05:35:0C:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a804fe1-a4aa-3daa-98c1-6e4128a1812d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
199.232.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:fc:6c:40:2d:6d:b4:f6:b3:60:5e:98:f7:aa:52:22:47:32:
eb:26:75:de:a1:2c:51:ab:27:e7:da:29:91:3e:dc:a8:cf:41:
93:3a:43:f8:42:6c:df:bf:4b:0c:2e:92:10:0d:6c:76:ce:11:
81:aa:ec:c3:c5:a6:e5:b3:83:73:ef:0e:20:33:c4:28:4b:8e:
16:81:21:2a:7b:d0:d0:24:f9:17:34:62:07:ca:2d:ac:d6:31:
bb:57:76:c0:3a:1c:9a:8e:8d:32:91:9b:98:36:8a:3d:70:44:
f4:d1:92:13:fa:0a:31:d6:24:0b:b3:a6:40:cb:62:50:cf:28:
07:21:fe:95:12:9b:6d:c7:d7:95:74:d0:bd:30:63:02:ad:91:
eb:e0:10:37:d5:da:10:6d:f4:3c:ba:ab:d2:cf:9b:61:31:90:
13:0c:26:17:27:75:36:48:21:38:1a:45:f6:e0:55:9c:15:65:
f5:56:96:c0:cb:d4:0d:58:82:86:01:44:6d:b6:24:36:a0:40:
1d:00:0f:79:6b:45:52:e3:04:7b:53:f9:ec:6a:b6:f7:6c:8e:
c3:0f:8e:57:43:39:f4:ef:11:66:55:81:bf:54:d2:40:8e:93:
5f:fb:a3:d7:04:61:21:dd:2d:23:00:fa:f6:e9:cb:9a:65:42:
9d:8b:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:04 2025 by rpki-client