Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa
File: f1b37e34-0530-3d7a-bf38-76831b59972d.roa (raw, json)
Hash identifier: w0RZEcKVpqaWnyq00WKcOFDLdjqLd3C96vP9OQ0a+8k=
Subject key identifier: 66:F0:44:AB:87:BC:B3:C9:39:EB:8E:93:1A:FD:D3:BA:CB:B9:14:E0
Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial: 010D0C9F432858484D758AEC91AB21FB76086928
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 22612
IP address blocks: 199.85.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:8a:ec:91:ab:21:fb:76:08:69:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=d9d5052c-1ae8-42cd-82a2-ae8fe305a5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:50:21:43:65:29:77:50:6c:34:5d:56:a8:
7a:94:02:a9:85:0f:77:d2:41:3f:5d:51:7d:65:19:
cd:17:86:42:e5:0e:03:ed:74:c2:a3:a1:91:26:f1:
a4:8e:b6:b3:7f:74:57:97:dd:a3:e7:4e:23:5d:2f:
42:55:55:bb:b4:57:45:54:82:d6:95:ff:53:03:bc:
4b:b8:5c:9f:88:5b:4a:ef:07:67:d6:8b:87:e0:8a:
a5:d8:a3:01:84:f0:4e:5d:b7:35:50:db:b4:83:1c:
af:4c:2f:35:50:4c:96:0d:f4:08:60:cc:70:23:ec:
70:b7:0b:37:80:c7:2a:d2:b5:a5:0a:51:4f:0f:07:
9f:31:20:44:cc:fc:68:46:66:f3:02:14:d6:4c:6b:
e6:d2:0b:52:c5:b6:06:5b:25:61:95:09:7d:41:9b:
36:4b:eb:18:7c:21:6b:18:d9:d7:a0:0f:ed:97:d9:
6f:7c:64:c0:ac:22:9c:aa:d8:28:8c:9f:0f:4c:9d:
48:6f:68:dd:c4:bf:d1:a2:0c:56:80:39:45:f5:f3:
0e:9a:f3:68:c7:6b:8d:59:7e:bc:92:3d:d7:bb:24:
a4:0c:5f:27:f1:70:c8:95:f3:d4:ba:00:67:99:f0:
4b:71:dc:d9:d2:1e:eb:02:80:bb:29:39:57:56:c6:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F0:44:AB:87:BC:B3:C9:39:EB:8E:93:1A:FD:D3:BA:CB:B9:14:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
X509v3 Authority Key Identifier:
keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.85.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:f5:67:02:11:5e:dd:04:59:96:4a:3b:c1:79:44:1f:97:d8:
f3:b2:de:d4:f4:8b:d9:39:46:a6:c5:93:11:9c:50:4b:23:7a:
f3:0b:9a:bf:fa:ab:37:d4:ce:81:bf:fa:6b:41:f1:79:b4:c4:
56:19:58:ad:77:76:94:64:7c:af:9d:e8:7f:a3:84:7b:cb:6d:
67:6f:fd:27:30:cf:9a:b4:54:b1:f3:4c:ab:13:32:f6:02:ca:
7b:a8:8c:9d:db:e5:6a:dc:1c:5c:f4:7e:3e:89:36:10:0e:c7:
f8:43:07:ed:f5:0d:89:f6:a2:52:d1:e5:cf:b4:21:8c:a4:95:
79:a8:87:82:b7:4a:d9:99:8a:cc:67:4d:93:9a:23:ee:8a:fd:
db:24:b0:ef:a3:e1:01:50:dc:41:03:04:ab:e3:36:3c:d2:a6:
4f:4c:04:8b:83:fd:bc:b2:0b:9b:e4:58:6a:44:fe:56:e0:be:
18:4f:20:ef:92:8e:e4:43:b6:53:92:d5:3b:64:2b:79:d0:6e:
4e:ab:57:6a:1d:f0:c9:ed:ed:ce:8e:b1:f1:f8:54:fe:65:2c:
14:80:d8:b6:0a:57:e5:d1:b0:1f:ce:14:e5:6b:84:6a:26:94:
35:df:9c:69:81:1a:bf:48:f5:b0:70:e2:8b:a9:b3:37:de:2e:
f8:9a:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:57:13 2025 by rpki-client