Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa
File: 53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa (raw, json)
Hash identifier: 5EePfJZrA+EHYM3g6RlxJO5mvDw+U7u3DC37tX1Z5a8=
Subject key identifier: 1F:86:53:84:AE:71:6D:35:30:C1:8E:D2:1C:B2:87:55:F1:7B:25:00
Certificate issuer: /CN=d3bf923d-6c9d-4713-887f-1f30075cf850
Certificate serial: 010D0C9F4328584875F05238422A76B627DBC7A8
Authority key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 32746
IP address blocks: 199.175.56.0/22 maxlen: 24
199.201.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:52:38:42:2a:76:b6:27:db:c7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bf923d-6c9d-4713-887f-1f30075cf850
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=aea02125-8ffc-4771-aa5c-f2c58ce52a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:96:ca:28:d2:5b:93:96:85:f0:50:2d:c2:
1b:04:68:b3:fe:8c:31:34:e2:0a:c4:06:18:99:85:
34:57:1e:5e:6e:a7:7f:c2:82:00:2b:85:f5:3e:f7:
6c:bf:30:d9:53:ba:be:7e:ba:44:39:db:ce:6c:1f:
38:70:ea:e1:11:cc:29:a0:72:c6:ff:32:f8:dc:1d:
2d:84:c7:c6:66:11:26:53:d9:a2:ab:e6:e5:1f:e0:
b7:81:c2:fc:64:7b:2d:1e:90:71:9d:8f:9e:f2:12:
9a:70:cd:01:61:58:73:11:83:26:02:f0:b9:d7:a2:
60:f8:66:de:64:66:06:6e:a2:d6:42:71:88:50:3e:
55:52:25:ab:95:81:89:6f:af:d9:01:6c:39:4f:d6:
90:f6:6e:20:55:05:7e:fa:f5:2d:65:18:19:42:69:
dc:c4:ae:ec:e2:18:8c:d6:16:5c:89:71:da:47:12:
22:a7:36:13:24:67:42:c4:6c:59:8f:dc:33:11:25:
ab:f1:7f:dc:25:a4:3d:58:32:bb:d6:a1:42:23:c2:
a3:56:3a:18:1b:7d:ac:57:3b:45:8c:2d:07:dc:81:
2e:dd:00:e6:d2:93:46:e4:5d:60:09:e8:98:a6:ce:
0d:24:73:db:71:39:26:39:d2:c4:af:38:c8:61:b3:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:86:53:84:AE:71:6D:35:30:C1:8E:D2:1C:B2:87:55:F1:7B:25:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl
X509v3 Authority Key Identifier:
keyid:5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer
sbgp-ipAddrBlock: critical
IPv4:
199.175.56.0/22
199.201.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:0e:49:6e:bc:d9:4a:3e:e7:06:0f:68:b7:7c:de:b7:1b:1f:
4e:80:e3:83:a2:9c:ec:cc:30:76:df:a3:29:74:21:b7:13:d4:
36:93:fa:58:3a:ff:d2:07:f0:60:d8:34:78:72:db:b7:2a:42:
13:8f:3a:77:7f:be:d2:e4:e7:61:72:97:f6:b9:b9:c1:f2:61:
a9:f9:5e:a5:30:21:36:80:f6:9c:be:38:7c:6b:e1:22:a0:e6:
b0:c0:b4:81:47:48:85:6d:3a:13:45:7d:ab:99:d0:04:da:c3:
36:15:e2:fe:f1:95:f5:3d:df:8b:03:95:42:1d:a4:b5:9c:de:
3d:87:41:a6:cc:86:e7:96:9d:39:9a:dd:45:09:21:0a:2f:4b:
83:5e:c9:f3:cf:ef:c4:f5:bf:d8:a8:b3:31:4e:1b:f3:37:71:
71:d2:7b:9f:e8:8a:a4:3a:c6:89:47:49:27:e3:04:a7:73:a2:
94:b7:30:bd:1b:07:e8:98:67:12:dd:a5:bc:b0:f1:9f:fd:64:
97:47:97:a5:1b:0a:cb:7e:72:d6:29:55:3d:d4:e7:58:b8:2f:
7a:95:b9:04:53:2e:34:ee:65:64:54:16:0c:29:6e:60:c6:2e:
b0:8e:1b:ec:c2:d8:b0:96:b4:33:08:69:66:dc:af:fa:a9:23:
f5:20:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:58 2025 by rpki-client