Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/31448255-a906-338e-b992-b054a6d0f6c2.roa
File: 31448255-a906-338e-b992-b054a6d0f6c2.roa (raw, json)
Hash identifier: vwL8PL62+t3K7+fZUX3PylUiSt9I3U9N6wYUov/NOa4=
Subject key identifier: 72:88:CC:F8:FD:8D:10:DF:22:80:3A:54:94:D5:28:C1:98:2C:47:6B
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F43285848090FB732E547638D75801348
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/31448255-a906-338e-b992-b054a6d0f6c2.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 62548
IP address blocks: 199.241.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:b7:32:e5:47:63:8d:75:80:13:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=94cc35fc-438a-4f73-bd4c-8686015c24fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:63:fe:81:4d:df:25:3e:03:ab:c6:85:95:81:
fc:b1:06:2e:b5:9f:a2:01:7d:9c:1f:de:0c:a2:54:
81:c9:40:74:17:52:54:10:4d:75:5a:7a:cf:a4:2c:
90:c6:26:a0:fd:12:b3:3c:fe:7d:89:8c:73:e9:54:
99:ab:16:12:74:a5:cf:94:93:3b:83:82:90:a6:ea:
57:71:86:82:34:43:0b:6a:23:93:e2:98:42:c0:1f:
bc:d9:70:24:e0:f3:02:d6:96:ca:9d:70:cf:18:87:
fb:a8:4b:b2:81:df:08:91:6a:cf:39:81:cc:56:15:
87:ab:6a:b8:a7:a1:f9:3f:a1:e3:ff:9d:04:99:1a:
9e:2e:44:8d:3b:20:5a:ff:d5:f7:0b:6a:5d:ed:31:
89:bd:82:ac:2e:64:7c:c7:03:99:2e:8c:bf:fa:7a:
5d:aa:33:2f:cd:62:9f:05:5b:48:69:ef:a6:0b:fe:
76:e3:ef:85:db:b2:de:ab:a7:3a:4c:5d:5e:32:b5:
8a:4b:f6:d9:3d:47:ed:1a:df:e7:8d:ed:58:5b:a4:
2b:dd:a1:52:18:bb:c1:74:0a:35:7c:62:30:d4:03:
60:61:b5:eb:d1:8c:3a:08:98:ce:4c:a5:1a:f5:83:
47:2f:18:ef:86:f0:a5:2c:94:3d:57:e0:d8:13:e3:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:88:CC:F8:FD:8D:10:DF:22:80:3A:54:94:D5:28:C1:98:2C:47:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/31448255-a906-338e-b992-b054a6d0f6c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.241.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:c3:1e:6e:39:8f:a0:1b:8f:2f:14:d2:f4:f5:14:77:aa:df:
96:0b:2c:14:22:61:ec:49:c1:9f:5b:ad:37:c3:e6:94:9a:2b:
6c:99:b8:b5:5f:fc:fd:86:b7:0c:6c:a5:9f:28:d4:24:3c:ed:
2b:37:03:6d:59:11:99:01:e2:5c:93:29:9d:c3:9f:bd:74:0a:
e2:64:7b:30:97:6c:a9:1c:9b:f3:59:87:48:03:4a:b3:3c:88:
b8:1d:c2:ae:c2:a2:5c:3c:53:47:fe:3f:70:57:7e:e4:9e:b3:
f8:52:a7:c3:fc:5c:33:3a:9e:3f:93:27:22:40:fd:71:3e:ee:
0e:0e:6c:0d:b8:c6:a3:8d:01:61:ab:6f:3a:05:0f:cc:54:0e:
e9:0d:2c:a5:a3:4c:7f:27:9a:e9:90:c4:b2:0d:3b:e9:5f:d8:
81:a5:b5:e1:e7:18:75:0b:01:d8:34:8d:ee:21:bc:54:9c:87:
27:84:93:90:58:6e:56:ed:75:8b:90:43:c4:53:92:45:d9:68:
b4:cd:6a:cb:77:a2:be:48:3b:18:92:ca:cf:f5:e4:75:6d:a5:
3a:05:f7:73:77:2d:64:13:36:55:2a:12:e0:e9:c7:1c:74:4a:
08:b2:38:10:f6:0e:71:c8:91:e8:1e:90:e7:03:85:09:10:3d:
a4:a7:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:56 2025 by rpki-client