Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/9e44bc16-4835-33f8-b091-c87a69768d77.roa
File: 9e44bc16-4835-33f8-b091-c87a69768d77.roa (raw, json)
Hash identifier: XPAz6WM+0SmhPicOpGgcJaRiV9YDK+ZZwjSRRvruvpk=
Subject key identifier: EA:3A:12:2A:FF:3E:21:27:9B:B0:BF:07:53:F7:AE:E0:E9:40:DA:EA
Certificate issuer: /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial: 010D0C9F432858488DAB455AD1BF98309E9FE500
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/9e44bc16-4835-33f8-b091-c87a69768d77.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 394840
IP address blocks: 199.34.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:45:5a:d1:bf:98:30:9e:9f:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=6fdf9f86-b389-464f-b7a4-1741bb352240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:fd:bc:96:cc:fa:71:24:d9:39:33:ac:68:
aa:43:0b:5b:5b:d9:19:2e:c8:a6:51:19:2b:77:23:
d2:53:1b:74:fc:0b:bf:d8:82:e5:e1:da:5d:9e:7c:
2e:b4:91:45:87:0c:6e:50:fd:df:05:a3:7e:c0:95:
d6:eb:ad:cb:27:c8:ee:bc:be:47:84:67:34:ef:da:
81:f5:71:dc:cc:b4:62:3b:cd:ef:71:0c:6e:cb:c6:
f6:8c:be:3e:01:b9:9d:b8:d8:70:39:62:18:08:63:
e5:99:00:a0:39:ef:9c:33:7a:ac:07:c8:38:a1:fb:
1f:83:53:c7:d7:26:27:ec:da:c7:04:c8:bf:51:7b:
9e:8b:00:30:3b:05:2f:27:68:87:a3:19:33:06:3e:
a6:25:42:23:2b:31:43:92:08:37:93:b0:17:6e:8d:
01:89:d6:35:bf:de:89:7b:9d:5c:e6:14:a3:a0:6d:
f0:b7:b4:27:a8:10:2e:87:47:79:47:db:75:c2:1b:
ca:e6:b6:65:c1:f9:e2:21:07:c1:af:98:d0:3a:8f:
32:7a:4c:e3:ab:d9:a4:db:36:cf:17:1e:80:6f:88:
5a:dc:ec:09:f4:e7:13:02:c7:a9:c4:0d:19:47:9e:
f8:13:67:68:f1:80:17:0f:84:19:28:94:ba:dd:24:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3A:12:2A:FF:3E:21:27:9B:B0:BF:07:53:F7:AE:E0:E9:40:DA:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/9e44bc16-4835-33f8-b091-c87a69768d77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
X509v3 Authority Key Identifier:
keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
sbgp-ipAddrBlock: critical
IPv4:
199.34.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:88:d9:08:90:92:4f:0b:4d:96:d0:e2:aa:16:96:21:3c:39:
2b:04:4d:85:af:2d:54:4d:69:e0:5b:d5:78:68:5f:93:8e:bd:
f3:d0:e9:0d:f5:ea:18:8d:19:f8:27:a4:5a:9d:79:d3:14:14:
21:d1:c7:8d:37:28:50:f3:1e:46:2d:86:42:41:98:ca:aa:62:
3a:51:19:69:52:f8:40:34:f7:94:82:8f:dd:c7:0e:6d:b3:0e:
4c:f2:72:4b:ca:41:bc:8c:6e:9e:a8:4a:cc:c1:55:15:1a:3d:
04:ad:3d:6d:bd:98:a4:26:02:8e:33:69:22:fc:79:e7:0c:5b:
1e:3f:ff:b4:7f:32:7e:94:83:23:61:20:63:ea:c8:68:f1:1a:
2d:d9:1b:ec:c3:59:50:3e:40:63:2c:e1:ee:80:f2:b3:1c:45:
7b:9b:ac:8f:93:3b:9f:b1:04:e7:ba:b3:5d:f8:16:4a:27:5e:
eb:90:64:3b:85:ac:41:aa:eb:23:b4:63:6b:7d:77:88:6c:f3:
94:08:ed:d4:f0:6e:2c:5f:4a:a8:9e:7b:0e:d9:81:24:84:ae:
a9:66:7b:86:ca:9b:d0:6a:7b:85:8f:b2:54:45:7e:b9:a5:e0:
40:50:ef:06:65:14:c5:0f:a5:1e:71:db:61:7c:95:f1:49:f7:
0f:b4:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:30:49 2025 by rpki-client