Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8353d44e-5439-315c-8dfc-2f45b26eac9d.roa
File: 8353d44e-5439-315c-8dfc-2f45b26eac9d.roa (raw, json)
Hash identifier: AGpjJbmPqeJnh6mKyrDxA2nYmKNBq2yL1FWG2fVAUmE=
Subject key identifier: 44:6F:53:71:D5:67:63:D4:0A:35:0F:39:C3:94:79:FA:2A:71:91:E9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100A901BBD139F37E839D7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8353d44e-5439-315c-8dfc-2f45b26eac9d.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 20447
IP address blocks: 199.170.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:90:1b:bd:13:9f:37:e8:39:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=798e99a7-1467-46af-a1b5-4de9af589f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:04:29:4b:32:8c:eb:a4:ba:22:0f:27:bc:
fb:57:b3:98:49:ed:73:ec:b3:22:cc:fd:65:52:22:
b9:78:c0:c0:a1:c0:06:f3:c0:41:82:f0:b4:02:ef:
9e:b3:1d:44:35:20:d1:1f:6a:32:ca:26:5d:32:d3:
51:33:1b:f4:b7:30:fe:c1:09:81:54:71:c9:a4:46:
d9:b7:73:55:3f:6f:b6:a0:2c:89:15:26:39:0b:f9:
f9:f2:e4:24:b9:3f:29:ad:2f:20:34:68:b1:f7:ac:
de:2c:57:5c:73:78:ff:f4:48:4f:b4:81:97:33:63:
00:f3:ea:1c:d0:96:d8:cf:23:be:10:ce:d2:ee:07:
8c:3f:d9:51:e7:89:e1:c4:bc:46:8e:4a:c5:6c:3b:
cb:cd:cd:84:e1:7a:63:a6:61:b3:2b:67:23:5d:7c:
ef:52:76:61:44:e4:e8:4a:81:30:46:82:af:61:90:
da:eb:78:13:69:03:bd:b0:23:a1:e8:df:43:80:ff:
4e:d2:6f:e1:ec:7f:1e:4c:34:12:9c:4f:29:d1:20:
de:aa:53:53:0e:e2:d0:e4:c8:8e:af:0e:47:88:93:
5a:0f:78:bc:8a:ec:9f:e4:5a:60:38:1c:f3:5e:cf:
ea:55:5e:ca:ff:59:a1:04:fe:38:5c:f7:fa:f6:5f:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6F:53:71:D5:67:63:D4:0A:35:0F:39:C3:94:79:FA:2A:71:91:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8353d44e-5439-315c-8dfc-2f45b26eac9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.170.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:56:34:03:53:09:ce:48:14:db:e5:c0:40:7e:85:1c:0c:ef:
0a:ac:41:c0:5a:db:f5:b9:a9:fa:9b:1c:96:01:e6:c9:9d:11:
e4:df:de:9d:b8:db:34:18:0d:b0:fe:b5:60:9d:88:2f:ed:79:
90:d1:9e:eb:2e:77:69:95:c9:99:df:64:1f:03:c8:6b:7b:4d:
92:a3:e1:6b:ff:0a:6d:1e:37:85:fb:ef:a7:f8:36:07:fb:e5:
69:f4:d3:55:ae:52:13:59:93:08:70:52:b0:5c:40:cc:b1:95:
12:4a:c7:32:57:f5:ea:a2:c2:65:1b:d2:b7:65:02:f6:34:c1:
3a:f6:68:4f:e8:43:26:ba:24:3c:35:84:25:5d:bd:98:1e:59:
43:48:cb:f4:da:de:97:21:22:2e:64:aa:8b:98:cc:96:0f:8f:
55:c9:b3:47:fc:e5:8d:a6:ba:b1:16:80:09:38:8a:17:13:c2:
19:3d:bd:5c:0a:50:cd:fd:94:e9:f5:14:59:74:77:cc:77:91:
e3:22:d8:25:6d:ba:9c:aa:d6:a4:20:87:e4:4c:4e:e6:c2:6e:
b6:1f:80:c0:4e:9a:b3:32:b0:1e:8d:2e:66:08:ab:b4:14:ba:
31:ec:9c:be:c8:83:d6:e4:6a:41:d7:f2:00:71:ef:a6:f9:fe:
6d:16:4a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:03 2025 by rpki-client