Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd1f4dda-22e0-36e8-85a0-e76ed9807d40.roa
File: dd1f4dda-22e0-36e8-85a0-e76ed9807d40.roa (raw, json)
Hash identifier: cfSUYt4b94KI5rpdlzUdh3EKyoPplClZ+3P1PRQr8VE=
Subject key identifier: 31:3B:1E:17:0E:1A:07:06:67:C8:CA:A2:8D:E6:63:5D:CA:B7:19:2A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424B077EB36342CA52940200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd1f4dda-22e0-36e8-85a0-e76ed9807d40.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 22394
IP address blocks: 199.223.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4b:07:7e:b3:63:42:ca:52:94:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=ac24ec6e-db69-4440-8f34-fade287fa195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:f0:c2:e1:5e:32:4c:21:6b:f0:e7:43:68:
fe:7e:6b:8d:11:c1:8a:5c:bb:c7:72:b0:86:3e:01:
89:c1:ac:8c:ff:a8:6a:05:76:d6:08:f0:c3:87:bf:
66:fa:94:13:27:e7:bd:fb:9e:8e:07:d5:82:ed:7b:
96:4d:91:b7:2d:ba:f5:7d:a9:52:fd:24:49:93:5c:
43:d0:56:d8:18:18:86:c9:84:e9:4b:32:18:18:9b:
28:1e:ab:7c:44:12:22:5e:d5:76:25:f7:bd:c0:07:
93:e5:25:4d:33:b2:81:d1:ea:04:12:92:e8:51:7e:
54:16:96:e0:66:fb:1f:39:97:5a:e0:00:a5:41:f1:
f8:27:2b:ba:e4:b7:73:6d:53:3b:03:d6:3e:f4:cd:
35:9c:dc:41:09:47:08:af:62:e6:9c:01:2a:08:0f:
38:c9:24:cd:5b:a0:79:20:d1:0c:12:4a:27:58:3d:
c4:62:ee:2e:50:bd:d8:13:48:44:f5:79:8b:1f:12:
5e:bc:ed:65:7e:1b:e0:89:f0:0b:d0:92:a3:e9:ed:
d7:be:c8:b5:eb:7f:1a:ae:05:1f:19:73:28:22:6f:
d8:35:1d:08:9c:b9:9a:35:51:6c:a3:7f:fd:6f:4b:
f3:3e:aa:ee:20:b6:ed:13:99:1e:85:63:24:6f:0d:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3B:1E:17:0E:1A:07:06:67:C8:CA:A2:8D:E6:63:5D:CA:B7:19:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd1f4dda-22e0-36e8-85a0-e76ed9807d40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.223.112.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:26:fc:12:31:7f:da:d2:b2:87:1a:07:1f:96:58:80:a5:62:
bf:8f:b2:6e:7a:af:e2:71:47:ed:d3:c3:af:18:7b:bd:c8:c3:
39:86:7d:56:c2:53:08:a8:4d:9a:ad:14:e5:aa:72:3c:33:f8:
33:e2:1d:cc:4c:50:24:d1:cf:80:d2:78:b8:40:13:25:bb:30:
b3:60:5d:a4:d7:61:2e:b8:f7:06:a7:be:e9:90:a7:fc:e0:0d:
9b:ec:61:7e:fd:ba:1c:f1:8f:8f:8e:a4:04:1a:7c:03:27:f7:
ab:e8:fe:04:78:7b:95:c8:aa:24:5f:1e:a1:2a:fb:2f:a4:9f:
5e:3f:d6:4f:13:04:20:93:ae:9a:a2:54:bb:64:e2:aa:ad:37:
10:3e:3f:fe:05:c2:0c:4f:b9:75:c6:b0:fd:6c:48:e9:bb:32:
97:a7:fb:ec:07:84:40:14:8b:3a:14:12:95:f6:4a:0b:23:4c:
cb:92:2a:4f:f9:5c:eb:52:61:d6:bc:2f:63:47:6f:44:5a:4f:
a4:18:4f:82:9b:08:9d:0b:2e:51:7e:5f:e4:d6:c4:b7:55:82:
43:80:e1:db:5c:c8:ed:8a:92:01:70:75:18:28:53:ae:5e:06:
fe:82:8e:15:2c:21:f5:fd:89:55:0b:a7:4a:6e:61:78:0f:66:
e6:f5:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:16 2025 by rpki-client