Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa
File: c038d6f1-52c4-353f-bf06-0895e4955e50.roa (raw, json)
Hash identifier: TYvqx0EDTjTZ4UuvUsqOXPjf3vdSpsURVi+LVk7wQmk=
Subject key identifier: 6B:45:B6:1A:9E:9B:A9:38:BC:C5:46:37:ED:70:DE:F6:4C:F7:23:38
Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95
Certificate serial: 010D0C9F43285848143A7DAC47F10037C33F53A0
Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 64236
IP address blocks: 199.193.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7d:ac:47:f1:00:37:c3:3f:53:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=085753a9-3810-49ac-9f5d-d9bdb9ad5371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:dd:95:2c:7a:8a:01:1f:ee:1c:7a:18:42:
28:6c:6f:a3:b6:35:83:fa:22:19:0f:08:68:b0:33:
86:4b:df:aa:56:f7:43:28:bc:b9:b1:9e:4e:82:a0:
e6:60:91:d7:1f:c3:c7:f4:86:d6:6e:c8:72:c8:1e:
a1:22:30:0b:1e:aa:e3:14:33:35:38:61:c2:8d:66:
cd:4c:78:b5:10:6c:22:d6:35:f1:76:93:f3:66:3c:
34:db:31:c7:e3:70:a2:c0:cf:7b:39:32:50:de:21:
b5:1b:f6:1f:fb:d0:eb:c3:56:6b:67:30:14:03:2f:
71:89:32:43:c0:95:4f:35:23:73:f8:5a:54:95:d4:
22:ee:6b:63:f0:6a:a2:97:87:30:a5:f8:63:da:0b:
a8:50:a1:49:cc:b7:aa:9e:b2:84:d2:2d:c0:49:5c:
69:29:10:bb:02:ab:bd:58:f0:82:db:b9:cd:80:0b:
72:aa:0c:f3:ef:4f:e0:a9:39:8f:75:3c:e5:a8:be:
e5:73:a3:92:eb:91:e8:64:ee:2e:b4:74:84:eb:51:
37:28:7e:a8:b3:ab:c5:a9:fa:2e:f6:64:11:6f:0f:
8d:a3:8a:ce:52:49:cb:c0:39:d1:3a:be:3d:4f:ac:
f2:d5:57:02:db:92:39:62:66:58:a5:16:04:36:0e:
92:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:45:B6:1A:9E:9B:A9:38:BC:C5:46:37:ED:70:DE:F6:4C:F7:23:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl
X509v3 Authority Key Identifier:
keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer
sbgp-ipAddrBlock: critical
IPv4:
199.193.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:d6:39:5e:9d:44:57:59:ae:35:24:03:2e:4b:f2:3c:1b:0d:
68:d9:cd:1a:e4:55:85:0a:ce:13:6f:74:9c:75:57:a2:a2:6d:
b3:94:ca:77:81:fa:10:bb:e8:df:91:e6:06:86:fe:51:43:9e:
3f:42:40:ed:09:e3:84:0a:1e:59:b1:a4:d0:48:0a:31:df:3f:
de:01:fe:a4:30:54:2d:3c:2f:c3:7f:9d:62:c6:73:05:2c:b0:
47:19:4f:00:e5:5b:67:35:7b:09:c5:1c:af:cb:a9:fc:ad:24:
22:43:4a:ed:25:1d:16:13:72:9f:a8:a3:47:6d:69:c0:e9:ef:
1e:5e:50:e9:7d:6f:7f:95:7a:8c:8e:d0:e9:bd:ab:7e:44:29:
16:e3:cb:ff:ea:36:33:45:f9:ca:6a:c0:94:91:a1:c4:db:79:
56:8f:b6:34:12:1b:52:aa:54:89:a6:ad:20:8c:0d:29:8a:dc:
ca:3b:d6:0d:00:bc:46:ea:a5:1b:16:0a:9d:9e:33:5d:5c:ee:
e8:7c:be:b7:24:29:16:1f:eb:ec:ef:11:71:ac:3b:09:ba:26:
90:38:9f:aa:a7:8f:e0:87:b7:3e:fc:0e:06:2e:cf:51:1a:92:
b3:05:38:81:83:81:6f:3e:84:a8:e7:48:78:bb:5f:40:de:b4:
70:a3:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:21 2025 by rpki-client