Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa
File: d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa (raw, json)
Hash identifier: RQ0/qy8m7/ZDMFVZgzah5dR1sPFG19ui54Y/D8XDty8=
Subject key identifier: 98:CA:65:B2:01:69:D4:9F:BE:66:18:9A:B4:43:4F:51:6C:21:2B:97
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325DB5674CF24D3F7353540
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 199.232.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:db:56:74:cf:24:d3:f7:35:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=657a8541-36a4-4777-816c-d9aafda0422b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:57:72:6d:ea:2d:0a:c5:df:82:2f:48:c5:
b2:fc:2d:ae:d3:49:df:9c:3f:c7:a1:bb:fc:da:d4:
4c:02:00:d7:1d:d1:8b:c7:81:60:be:e2:0e:35:78:
c5:ab:67:4a:05:d8:1a:0e:49:1b:b4:f3:1f:ad:8d:
62:41:f8:13:91:c1:11:cf:99:df:17:da:e4:ea:59:
1f:22:16:b7:c3:3c:73:9a:c1:7b:20:17:f9:aa:3d:
0c:9e:1d:68:89:c3:51:c3:5c:21:cd:15:b3:8a:de:
9a:be:55:3b:e1:7a:09:ad:b0:72:6f:2a:44:e6:5b:
35:72:cc:c6:59:32:ce:de:a6:54:e6:7b:3b:7f:3f:
76:d2:b1:3e:10:81:31:61:8d:93:2e:70:09:1e:52:
48:d9:59:20:07:9e:a6:08:f3:0d:1b:34:94:b5:7d:
50:26:be:71:bf:43:f2:8f:56:a1:2e:1b:c7:d2:29:
97:22:c0:49:65:8b:eb:6a:29:60:ac:1f:48:60:08:
fd:aa:f7:c1:d2:39:37:d4:80:27:ec:74:44:5a:42:
90:e9:fc:6b:a8:fe:b7:29:64:72:09:19:a6:f9:3b:
6d:31:95:69:53:eb:1e:3e:b4:ef:dd:40:1f:65:de:
bd:2d:d8:0d:10:32:9c:72:a4:24:12:d6:58:11:34:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CA:65:B2:01:69:D4:9F:BE:66:18:9A:B4:43:4F:51:6C:21:2B:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
199.232.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:5b:b5:0f:ce:11:04:c8:01:09:75:84:b2:5a:74:84:a7:4e:
30:00:c1:d2:9a:27:c4:99:57:a4:db:f5:08:05:da:d5:69:c1:
e1:85:03:41:0f:a7:a0:b3:a0:55:c1:91:d4:83:5e:63:cb:04:
77:1e:f9:22:4f:fd:a9:95:21:9f:75:32:c5:57:cd:24:dd:a2:
a8:af:86:e2:da:39:96:dd:ae:c0:ff:42:09:37:25:37:ca:84:
ed:8c:a3:01:b8:c4:f9:1b:b7:66:10:ea:d5:ce:98:92:21:7b:
fd:3a:95:53:83:17:c1:57:c5:8b:d8:83:00:0a:b5:62:92:c5:
bc:57:b8:e8:0e:6f:2a:4f:05:58:a2:e4:0f:90:bd:c0:24:e0:
4c:06:b5:63:30:84:32:21:01:f7:84:a7:d2:fa:33:ac:59:0c:
64:74:72:31:46:ee:bb:63:68:d1:b2:e7:0c:1c:ee:0d:1e:25:
47:01:df:ca:74:c2:1c:a5:72:0a:0b:87:93:83:f8:64:07:6a:
b2:06:3a:e5:fe:c3:b7:a1:62:cd:40:8d:87:41:af:0d:26:e1:
47:6c:bb:8e:bd:ef:4a:d6:22:b3:50:06:6d:88:ec:69:ab:f9:
dd:a6:f0:b7:e4:0d:c6:78:75:76:50:77:e7:42:e8:75:4c:a2:
6c:a1:ad:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:15:22 2025 by rpki-client