Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa
File: 6f35d33f-3b25-3848-9287-a755ae18fa87.roa (raw, json)
Hash identifier: TFBwKJHRiaagEe9Dw6H3LhwW9WL2MBwIyWxfbRwIbLU=
Subject key identifier: 5E:0D:4D:D5:D4:74:50:2A:F8:35:03:48:71:40:A1:6B:79:65:AF:0B
Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial: 010D0C9F432858480BDA70B44CA72D118B1C3370
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 40627
IP address blocks: 199.255.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:70:b4:4c:a7:2d:11:8b:1c:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=d4b3fc82-589b-4fc3-84d5-eee89e191261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8a:e7:7f:e0:2a:89:c2:47:80:de:f3:fd:0f:
65:a3:17:04:4c:7a:28:34:83:b7:7f:33:ff:f4:3c:
bc:7e:dd:a1:84:ca:3e:b2:39:75:1b:f2:6c:b4:f8:
76:32:5c:bc:cd:7d:0f:64:8b:46:b8:29:83:73:83:
6a:b0:7e:55:51:51:d1:c1:0d:a5:37:29:0c:5a:70:
7b:f9:45:1d:cb:a1:ba:a9:47:6f:f7:a4:27:60:0f:
47:b6:49:28:51:db:1f:e0:c9:dd:92:b8:c7:9a:e8:
c7:9c:6f:18:f5:6d:21:4f:4e:57:0c:2c:41:5b:83:
30:94:d8:b4:94:c8:86:a9:f4:69:85:72:00:5c:c2:
fa:6d:7b:9a:01:56:17:dc:4e:16:d8:31:5a:6f:97:
32:72:f9:96:b4:85:3a:dc:c2:a5:56:24:4e:f0:55:
48:39:f8:49:9f:16:37:0e:e7:4a:e5:b2:41:21:1d:
ad:db:32:fb:c0:6b:73:3a:96:5f:44:e1:c7:d3:98:
ab:02:c9:87:69:71:37:e7:27:9c:24:07:79:b6:68:
b6:ee:3b:dc:6e:be:1a:28:d4:2c:b3:1e:ba:e1:92:
19:53:96:ff:7e:8d:ea:92:be:f2:08:8d:52:e2:c0:
07:bd:71:46:c7:a3:2e:89:dc:af:d9:44:77:8b:43:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0D:4D:D5:D4:74:50:2A:F8:35:03:48:71:40:A1:6B:79:65:AF:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
X509v3 Authority Key Identifier:
keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:7e:cf:93:64:b8:a8:eb:c6:b4:d7:fa:b6:ec:ce:5b:3b:04:
e9:a6:6c:c1:ab:38:35:c3:d0:15:f3:c3:3a:14:6f:cc:9f:e4:
1f:3a:71:eb:9c:9e:02:28:0b:9c:c9:8f:24:95:ad:d5:5a:30:
56:22:b0:c5:4b:b9:6a:3c:f1:56:17:29:f3:3a:cc:12:2b:54:
13:06:5b:52:ae:15:4b:4c:cd:79:8f:27:e3:75:8c:91:67:ac:
de:40:79:42:29:49:08:b3:27:57:64:24:46:85:8f:ef:18:00:
4a:c1:85:eb:c3:b6:ea:ab:75:7f:0e:97:be:d9:33:43:32:fe:
6f:40:ff:61:2c:20:a4:c3:c8:b2:60:dc:3d:37:93:01:ed:12:
9d:79:33:36:59:57:35:f6:30:e6:9c:dd:ad:04:64:d5:67:f6:
86:68:91:b3:d7:a5:60:ab:24:82:d6:a1:ef:31:e8:51:cf:a4:
f7:cd:7a:95:55:52:41:60:69:07:64:e0:ad:5d:41:c4:34:df:
31:d0:85:56:76:41:9e:75:3d:93:f9:54:20:a6:39:07:7e:61:
e1:c8:12:e0:c2:cc:89:43:2a:d8:59:63:31:e5:9f:67:4d:74:
cd:df:21:94:d5:af:c8:27:dc:0a:d7:58:c8:0a:97:94:65:cb:
3e:e7:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:40:45 2025 by rpki-client