Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa
File: 33ce6ede-9c40-3d7d-9178-caa155d72046.roa (raw, json)
Hash identifier: ndtjizTTnCHXz8fWD5XWVrDO8AC3W9t2JRcPWU/xAmU=
Subject key identifier: D6:D4:35:07:C0:63:12:57:98:34:4B:19:F2:FD:DE:A7:C3:64:9A:0B
Certificate issuer: /CN=56b96151-8a90-41ad-aefc-1091ab214a92
Certificate serial: 010D0C9F432858487325B73CB88D463F13B49200
Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 14618
IP address blocks: 199.91.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b7:3c:b8:8d:46:3f:13:b4:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=2b66b068-761d-4a52-964d-530c6c545a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e5:40:f7:ef:8d:27:84:0d:83:e3:4b:56:1b:
92:df:95:a5:ae:3e:0f:93:5f:5d:7d:8c:55:79:32:
01:d6:33:c1:34:2e:cc:8c:d4:0b:d5:7c:04:b3:ab:
ab:cd:fb:49:1a:a9:2c:3d:13:24:68:8c:98:f8:11:
56:7f:f1:ca:f3:bd:1c:bb:a5:c9:83:f2:48:9e:66:
00:fb:bc:30:b7:41:d1:6c:a0:73:cb:fc:77:16:ab:
e9:dd:aa:a5:2a:73:e1:fa:4d:31:9d:8e:2d:49:df:
e2:c3:23:3c:2d:37:9a:68:ec:b7:76:c6:9c:42:7c:
a1:ce:de:6d:ea:93:43:53:55:c9:59:c9:f6:d0:a5:
6a:d2:06:ed:aa:de:50:16:5d:d1:f4:61:cc:c0:0b:
02:65:4f:10:4d:d8:7a:ec:b0:6c:70:62:06:2c:8d:
d8:d9:c8:44:f9:1b:f3:e0:00:32:0e:69:45:02:39:
b3:31:f0:f8:2e:5b:df:79:02:55:6e:86:7c:bc:6d:
1d:a1:4a:27:7e:7a:be:17:dd:2d:b7:87:81:73:b3:
c8:95:2c:68:39:ea:39:53:e2:95:a9:4a:42:ad:53:
26:7d:05:80:e1:80:02:ae:78:eb:4c:d8:a1:89:24:
fc:bd:3b:48:57:56:65:29:58:2c:d2:00:5b:d3:b1:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D4:35:07:C0:63:12:57:98:34:4B:19:F2:FD:DE:A7:C3:64:9A:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl
X509v3 Authority Key Identifier:
keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:5a:5d:84:79:bb:29:46:87:d5:7e:45:b2:3a:7f:58:d2:0b:
40:cc:06:ce:0e:f0:70:e6:b6:19:94:de:b0:00:b0:47:80:9b:
70:b4:03:c9:6d:65:c3:be:00:4b:af:97:06:8e:9b:e4:21:f3:
0d:9e:3e:a5:ee:7d:2e:4e:ba:ef:a3:30:b5:c2:7a:a8:1a:f4:
53:07:9d:78:51:e6:c2:c5:fd:b3:e3:15:3e:8d:9d:b9:c2:70:
0f:9f:df:64:52:7b:38:85:6a:2e:af:1b:4b:99:03:9d:3b:12:
25:13:00:78:ba:b8:f1:32:ca:c0:5d:df:41:35:35:78:e9:b9:
96:39:4c:32:75:35:9b:52:7f:30:ed:ee:a2:74:3c:8f:44:32:
37:f3:11:7f:8d:b4:a2:b4:12:f4:02:9e:d9:0e:a1:84:02:e2:
e6:7f:2a:34:a3:a5:37:12:bf:0b:2f:f7:5e:b0:d5:7f:ff:db:
76:41:4b:44:4b:52:c0:94:99:03:71:be:2f:2d:eb:5f:62:5f:
3f:0a:8f:9d:d9:c2:b7:8d:a0:17:2e:26:49:86:81:ee:f4:a7:
e0:78:58:e0:80:b0:ae:f3:87:77:64:df:af:7f:6f:31:b0:f6:
91:23:7e:65:53:b2:78:17:61:f0:6b:75:74:4d:fd:4b:3f:12:
0e:61:b2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:20 2025 by rpki-client