Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/626f524f-b019-3b9e-980a-f82d3111d708.roa
File: 626f524f-b019-3b9e-980a-f82d3111d708.roa (raw, json)
Hash identifier: U1V6hIEpJ3ChTLTsS8DvLohgd5xYhKWLj9EbB4f8PfY=
Subject key identifier: D8:14:6B:50:5C:62:72:4C:10:69:90:2C:4B:8F:97:0B:22:D3:90:2F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482A8FDB9ACC070E30419F3A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/626f524f-b019-3b9e-980a-f82d3111d708.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 17204
IP address blocks: 199.119.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:db:9a:cc:07:0e:30:41:9f:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=4f9a75ab-40dc-45bf-9982-6f89b2685cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:9e:2a:de:0d:d7:b7:d1:9b:79:0b:dc:d0:
8d:6d:e7:0e:c8:97:bb:03:18:a1:6d:c9:12:a9:c0:
2b:c0:6f:fe:cb:6a:99:26:c2:57:b7:5d:5e:5f:ed:
4c:be:ce:f0:13:ce:0b:79:19:26:a9:58:8a:9a:cb:
df:6d:72:4c:f7:a7:b4:62:33:97:d4:3d:5e:bd:d1:
b0:13:45:96:58:fd:72:6b:64:9c:4e:60:83:00:72:
bf:8a:2b:7c:ae:ff:89:f3:bf:4b:03:4f:da:ae:34:
86:d5:c6:6a:39:be:e6:45:f1:e8:0b:57:70:ad:fe:
09:1f:5b:20:9d:de:c8:24:39:65:fd:5c:af:ed:bc:
66:ff:f1:f6:cd:9a:00:dd:de:0b:58:e2:40:5c:00:
1e:1a:f8:bc:4d:c9:c0:fb:2e:b2:9a:17:1c:b5:28:
73:71:aa:39:19:df:ae:9e:01:99:f2:c8:9d:16:c5:
b8:01:df:b1:7c:8e:65:e7:de:e8:f1:b0:83:b4:11:
a6:ca:e1:a5:07:b0:e8:3f:b8:fa:ea:07:9d:f1:fb:
4a:84:61:ec:4c:d0:e1:a6:f4:8f:d0:94:a0:ec:1b:
7d:d6:4c:2d:cf:f3:32:dc:05:bf:50:a8:2f:0b:a8:
da:8b:09:ea:94:d1:26:01:e9:c1:19:24:a3:2e:98:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:14:6B:50:5C:62:72:4C:10:69:90:2C:4B:8F:97:0B:22:D3:90:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/626f524f-b019-3b9e-980a-f82d3111d708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:9a:05:79:cf:be:86:6b:ab:0e:ce:f4:d4:b4:28:0d:8c:63:
4e:4b:fb:ec:70:c1:20:0e:4d:77:4a:cf:b0:9a:31:a2:9f:7d:
58:70:9a:8b:b5:95:91:c2:e5:21:3c:78:6d:4b:b8:7b:ec:79:
ad:cb:d3:a2:a7:c5:40:01:00:66:e8:01:66:8a:65:df:32:bd:
d8:d0:72:23:68:ee:4b:a1:e0:2e:3d:f0:6c:27:9d:bb:0c:57:
13:a3:95:8b:dc:da:d4:98:bc:74:46:69:4d:32:09:e7:99:d4:
82:70:3c:c1:a8:33:39:62:98:99:ea:b3:17:00:13:fa:a3:d4:
36:cb:b0:77:1f:49:cf:3a:fe:7f:c9:18:4d:bc:91:4f:09:f1:
f9:ba:cf:b0:cc:d1:85:74:34:40:93:d2:11:fb:65:54:89:d6:
dd:80:00:9e:46:64:9e:d4:77:76:c3:6c:92:1b:4e:10:d7:a1:
de:0e:ae:66:5a:4b:79:33:54:22:92:b2:87:17:04:c6:fe:e3:
a8:dc:ac:41:bb:38:18:18:3d:fd:11:cb:80:4a:09:58:70:96:
95:fd:fc:31:4f:bf:79:80:21:76:50:01:88:36:68:c3:80:6b:
3b:28:ad:78:c1:59:2a:2c:ec:22:3a:3b:c8:54:4c:3c:1c:23:
fc:32:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:14 2025 by rpki-client