Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/025bf991-a5ca-3bcb-b9e8-901f2125ef88.roa
File: 025bf991-a5ca-3bcb-b9e8-901f2125ef88.roa (raw, json)
Hash identifier: tztQCPl5dWGmtvEFOHbDa7IhLuFtCZ08GW2kVmTZmyM=
Subject key identifier: 18:0A:F4:07:71:4C:F4:64:FD:F5:3F:7A:70:3C:21:F5:A4:1D:44:F8
Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial: 010D0C9F43285848642AB5469FE2625D68D89CB0
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/025bf991-a5ca-3bcb-b9e8-901f2125ef88.roa
Signing time: Tue 31 Dec 2024 17:13:46 +0000
ROA not before: Tue 31 Dec 2024 17:13:46 +0000
ROA not after: Mon 31 Mar 2025 16:13:46 +0000
asID: 62246
IP address blocks: 199.188.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:64:2a:b5:46:9f:e2:62:5d:68:d8:9c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Validity
Not Before: Dec 31 17:13:46 2024 GMT
Not After : Mar 31 16:13:46 2025 GMT
Subject: CN=c7344a14-f81a-4218-b29b-0c5156896106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7f:0c:b8:0a:f8:0c:f9:4e:85:c3:b0:be:a4:
f8:a5:6a:93:1e:bd:54:18:be:a4:64:f1:95:54:1b:
3a:a0:01:58:b7:12:9b:f2:0a:c8:db:18:c0:41:e8:
ef:2f:8e:c2:26:05:c2:45:90:93:62:7b:a0:04:b1:
f9:ac:8c:c8:f8:b3:c6:d6:16:34:56:a0:e8:d4:95:
c0:0b:9c:64:22:3c:c2:f7:f9:8a:85:9c:b0:52:6c:
96:f1:29:8d:3c:fd:25:79:33:b3:96:cc:5a:2e:ea:
98:6b:37:be:f1:84:81:ce:7c:ec:de:50:60:bb:f5:
d8:17:bb:44:a7:e6:4d:72:2e:c7:fa:20:f7:c9:8b:
87:74:4f:ff:c9:2a:12:33:3e:69:bf:ce:2b:58:da:
eb:4a:9d:f3:bf:f3:aa:71:5b:15:54:7d:1f:b8:30:
83:e6:f3:04:b0:a4:ef:aa:52:48:7c:91:1e:d1:bb:
72:5f:56:3b:b8:da:87:27:79:7b:4f:d4:ae:ce:31:
b3:64:4f:4b:72:3a:bb:2c:d8:08:8c:b5:41:e6:9c:
a1:40:af:73:44:cd:3b:7f:3b:46:1a:fb:67:88:dd:
a1:ef:9a:53:1e:4d:09:9b:59:b6:3b:83:c9:cd:48:
f9:2f:5e:13:c2:79:03:e6:cc:f6:71:d1:fb:fa:50:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0A:F4:07:71:4C:F4:64:FD:F5:3F:7A:70:3C:21:F5:A4:1D:44:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/025bf991-a5ca-3bcb-b9e8-901f2125ef88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
X509v3 Authority Key Identifier:
keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
sbgp-ipAddrBlock: critical
IPv4:
199.188.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:e2:0a:f0:67:4b:50:2a:a5:de:c5:3d:54:12:8f:b5:1d:b8:
d1:61:57:3b:bc:6e:fe:94:bc:e5:1f:0c:65:a9:c1:94:b1:4d:
60:d2:31:9e:f7:00:1e:1d:f3:e3:97:4d:fb:3a:aa:52:82:68:
9e:65:72:71:fc:8b:db:3a:86:41:8f:f7:8f:3b:59:43:cf:fb:
f8:f4:16:a1:b6:47:bb:12:23:20:46:76:11:b8:7e:4c:e6:15:
b7:2d:0e:44:c8:da:82:10:2a:eb:00:4a:56:9a:ea:87:f9:80:
17:95:c4:20:36:83:a2:43:c7:1f:db:22:34:ec:b6:67:49:f8:
ba:4d:d5:54:e7:ca:aa:b2:98:81:02:67:7c:98:56:43:db:4e:
2e:75:ea:de:26:26:1d:5c:85:68:8d:60:40:dc:74:78:7a:ed:
b3:dc:1c:8a:44:54:b8:c3:3e:46:b8:74:70:ae:7c:e6:14:b8:
df:f5:b4:0e:c2:c1:45:40:9a:c7:80:4c:bb:77:a0:f7:30:69:
48:66:16:6f:d9:bc:0b:ef:79:9a:42:d7:23:bc:83:cb:de:f2:
c6:36:95:9c:d0:b7:71:0d:fa:d4:09:95:0b:fc:1f:28:ed:85:
c7:be:3d:f9:e2:5b:e6:40:d9:62:a3:1a:e5:57:60:85:20:bc:
4f:45:e0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:13 2025 by rpki-client