Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa
File: 114c23eb-d2f7-3a43-8266-464e81836fee.roa (raw, json)
Hash identifier: JG+UQtpOKyzzjRxPC7Kpmk8BckuZn6oGc1gJFDqazqI=
Subject key identifier: A0:B7:73:68:D0:CF:19:8A:85:AF:3F:3E:DE:39:24:81:1A:FF:32:C0
Certificate issuer: /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695
Certificate serial: 010D0C9F43285847F154F1BEA0D8190044C6AF00
Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 26459
IP address blocks: 199.250.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:f1:be:a0:d8:19:00:44:c6:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=672728dc-9c59-4d20-8c85-55f78f625828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0f:23:0a:35:14:b6:ad:0b:56:a9:db:5a:d1:
5b:cc:ea:ef:cd:c3:b6:32:1c:8f:1c:88:d4:83:f0:
7b:8a:20:69:08:74:3c:72:63:2f:da:e9:5b:54:2d:
04:03:10:fb:e8:b2:5d:d8:9a:16:cc:e0:5d:7c:8a:
96:1b:65:9b:a7:02:30:fd:03:ed:d5:29:99:d8:b6:
31:a3:47:7b:c8:00:5e:31:d0:5f:e5:38:67:36:91:
79:b1:36:8e:a5:07:df:4c:e5:a1:75:c6:04:1e:ab:
06:69:25:ec:35:d8:cd:c3:16:bb:91:7a:c5:7b:b1:
ae:04:b1:16:f1:83:62:f5:c2:ef:3d:31:3e:c7:bf:
5c:81:44:6f:97:e1:98:76:5e:35:5b:6a:09:ad:bc:
cf:73:40:a7:d4:76:6d:17:27:63:e0:49:54:5d:ee:
04:3b:7a:82:05:eb:75:28:a1:4c:9c:36:a4:98:59:
30:53:95:e5:17:6c:d3:71:d1:b1:12:d8:a5:3c:d4:
07:e2:71:42:86:f8:30:6e:4e:8d:4d:08:2d:b2:78:
c5:52:44:64:b2:5a:58:40:8c:8b:94:7d:0d:a5:cf:
da:57:e2:b5:3c:47:14:94:bd:1a:e8:13:7c:50:3c:
f8:98:e0:42:06:54:d3:4d:fb:99:6c:16:20:e8:10:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B7:73:68:D0:CF:19:8A:85:AF:3F:3E:DE:39:24:81:1A:FF:32:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl
X509v3 Authority Key Identifier:
keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer
sbgp-ipAddrBlock: critical
IPv4:
199.250.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:37:22:9d:98:04:9d:a0:bb:ae:54:75:90:3c:5b:48:4f:1b:
b4:b5:49:3d:b3:98:ed:69:b4:09:11:84:45:08:f0:de:8b:5e:
6f:d1:a1:be:60:48:c4:95:3a:b2:2a:7a:77:95:c0:2b:13:91:
16:77:30:94:54:fe:ff:3a:a1:a8:6d:b8:5b:3a:e5:fa:9b:a8:
99:9a:68:e5:f7:36:0e:a8:bd:f9:f9:55:32:fd:af:7d:e4:e9:
de:1b:a4:19:ff:d5:43:46:f8:8e:92:74:f2:79:25:8b:2b:05:
17:54:25:84:a0:e1:f9:e3:8b:e8:61:99:3d:ed:13:59:e5:25:
ee:3f:00:0e:bc:a2:e8:29:1e:88:14:2a:63:a1:85:d9:34:da:
2c:00:26:3e:54:84:45:4e:45:ba:d6:96:e0:08:06:28:46:1b:
83:80:62:17:eb:10:30:a4:b2:0e:df:95:ab:cd:58:08:ae:e8:
72:eb:88:51:8b:98:10:f2:38:c0:7b:1c:b9:6c:ab:fa:2c:3d:
80:c7:08:50:81:f7:bf:9f:93:e1:d6:b2:62:f1:13:1b:ee:a4:
62:f3:06:85:28:12:a1:7d:ac:1a:74:94:c0:f2:75:6f:47:b4:
49:51:f7:02:bf:0f:fc:51:3b:1e:5e:bb:97:f4:3f:85:65:1b:
a4:a6:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:53:04 2025 by rpki-client