Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa
File: 444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa (raw, json)
Hash identifier: +QAb6ONNHann25kQba5QwoQZ7IYpCE0WseVtCwAmlSg=
Subject key identifier: 6D:36:AF:70:53:1D:89:C6:70:E2:B8:2F:46:BA:D3:A6:F1:A8:6E:C3
Certificate issuer: /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Certificate serial: 010D0C9F43285848100A93E3ED7B1BA7252829C0
Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 32402
IP address blocks: 199.7.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:93:e3:ed:7b:1b:a7:25:28:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=5a41893b-f711-435a-b910-f3294621da98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:88:05:80:cb:94:fe:f0:1d:f9:93:27:a5:
bf:8b:03:52:4b:af:57:6b:76:22:f8:96:14:61:06:
04:5f:23:57:84:b6:ea:f8:91:62:2a:82:e8:3e:d8:
87:ab:a3:df:61:67:7a:40:3c:78:17:59:d9:e9:c6:
5e:fc:72:d9:64:80:09:e8:81:9f:48:68:61:b5:bf:
ef:8a:98:d3:a4:0d:ed:3b:1a:13:0b:e4:f5:2d:a8:
18:58:e5:16:34:d6:70:f5:f6:fd:d9:f7:10:00:2c:
73:1b:a9:48:a4:9e:a3:07:be:bf:07:b5:e7:d5:68:
5a:92:27:34:d5:b2:1a:5b:00:c4:89:26:89:6e:e9:
9a:dc:a0:a1:28:ad:d7:50:2f:03:3b:a8:90:19:e7:
7e:60:00:99:8b:f6:e4:d9:da:cc:c6:36:0a:8e:35:
ed:3d:6a:f9:52:ba:95:7e:a7:5b:f9:91:8e:79:5d:
c4:e2:06:af:ca:78:7c:56:a9:84:45:ad:1e:d5:ac:
db:fb:fd:99:d4:16:4a:8e:6f:d0:d9:b4:6f:39:93:
48:cc:75:36:e2:2e:d0:e7:f7:45:64:f7:72:8f:0a:
16:e7:93:32:97:7c:59:8d:c7:43:20:a2:70:83:b5:
9c:c6:53:43:5e:c1:ba:dc:2d:1d:66:5d:f5:aa:ff:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:36:AF:70:53:1D:89:C6:70:E2:B8:2F:46:BA:D3:A6:F1:A8:6E:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl
X509v3 Authority Key Identifier:
keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:58:63:b5:b3:cd:79:38:5f:0b:63:13:6d:79:13:98:51:3e:
59:54:b5:d2:14:a8:ac:ec:69:1b:e4:c1:d4:4c:0d:34:5b:36:
d4:12:bd:8d:13:a4:21:71:d6:8d:56:eb:2d:78:ad:fc:e0:23:
8b:f8:24:b4:53:dc:1a:bc:f0:4d:f3:a0:f5:8c:9f:e9:53:f4:
d4:84:9a:6a:d7:a9:0c:4a:41:6c:1d:7a:55:09:64:f6:8f:ec:
77:e7:f7:d2:5b:08:0c:60:88:25:57:56:8b:78:bc:ee:4c:4d:
8e:f9:c2:e9:7e:75:6e:e8:0d:96:2e:c1:f6:c4:97:86:18:1a:
94:5f:5d:86:09:cb:85:4a:a6:60:e6:77:2d:f3:13:22:8b:c0:
76:2b:08:74:c4:29:bf:36:45:af:61:78:73:5f:0e:43:48:01:
5f:8f:59:62:a5:e8:6b:c9:a0:62:12:fc:3a:72:1b:64:f3:7f:
cd:a4:07:8f:a9:80:7a:94:31:3d:d5:c0:7c:e0:2b:81:0a:8d:
1d:13:8f:f0:c1:c9:b6:7a:2a:a4:3f:c3:44:0e:1d:0e:40:43:
f8:8a:19:80:d6:7d:dd:2e:e3:dc:72:9c:d6:b0:a7:c2:3a:45:
ea:91:63:59:5f:19:7d:48:8c:98:01:d0:d5:cd:df:3c:23:af:
c3:5e:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:12:31 2025 by rpki-client