Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa
File: b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa (raw, json)
Hash identifier: zhIE18uN0HuV8euGqU9FE7aTvaZO85yyVJAOC1eNUP4=
Subject key identifier: EB:EF:20:98:35:C7:D2:40:2E:E8:9C:76:FC:33:ED:7A:E5:00:BC:A1
Certificate issuer: /CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Certificate serial: 010D0C9F432858486695B2BD9EAE414B26F67700
Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 16717
IP address blocks: 199.116.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b2:bd:9e:ae:41:4b:26:f6:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=8bdea69a-e256-4412-ac4f-f8441dd7b7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:67:8a:cd:cb:3f:6c:27:b6:78:8f:b6:ff:
20:37:63:c8:69:ad:66:c1:9f:8b:f6:fe:23:54:82:
c3:c4:8b:0b:62:a1:ef:0e:27:b2:10:1e:71:d0:67:
d0:0f:83:42:32:18:27:c4:b7:4f:fc:60:b4:a0:3c:
be:1b:64:24:87:97:17:ae:63:39:d4:8e:ba:cb:53:
6a:b8:14:cc:d0:f5:88:0d:70:83:0f:16:b0:75:dd:
78:76:a7:65:11:99:20:32:90:13:b6:1c:1d:b3:7d:
02:d0:6f:c1:f6:b3:33:c8:2b:f0:eb:a0:0d:7c:e1:
be:1c:8a:1d:46:2a:7b:33:a4:bb:41:12:9c:65:67:
ff:bb:80:a1:c2:ff:d5:90:b6:0a:ae:16:65:a3:f2:
a2:c3:5f:38:bb:87:34:57:30:fe:0f:3f:46:91:fc:
0b:7b:f7:06:a6:c6:68:c0:d0:ba:f6:82:b6:3f:06:
86:3f:b8:b4:8e:ae:6a:b5:46:da:b0:c1:f2:71:70:
02:28:03:e8:ce:1b:72:9a:5a:85:6c:34:d7:0b:f2:
7c:7a:19:3f:81:06:4e:96:cf:77:29:04:ec:40:2c:
0e:29:03:16:ac:6f:3f:d0:c2:f7:c5:7a:4c:7d:25:
91:38:1f:cb:b3:80:44:36:32:2f:79:56:1b:49:a3:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EF:20:98:35:C7:D2:40:2E:E8:9C:76:FC:33:ED:7A:E5:00:BC:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl
X509v3 Authority Key Identifier:
keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.116.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:71:2c:cb:f6:cb:c2:ac:55:41:ec:82:5e:99:8a:ad:d9:74:
37:b6:f3:ac:bf:f8:a6:17:86:e6:85:51:1e:1e:21:e0:2d:ad:
1e:e4:a3:59:bc:45:a1:54:84:7f:72:f4:52:54:4d:9a:43:5b:
fe:85:af:ae:e4:73:2d:4b:1e:ef:fa:48:46:04:94:61:17:f9:
2f:5a:69:4f:36:9a:22:59:5e:de:9c:34:0e:e8:da:1b:72:da:
c3:61:c8:93:07:22:2f:a5:62:bd:aa:06:f9:6a:49:4b:05:79:
85:37:30:e3:b8:bc:2a:16:98:de:b6:44:dc:fb:81:a6:17:cb:
1c:63:04:47:84:3c:20:ea:de:6c:f1:64:27:c0:d5:71:fb:1d:
a5:7d:95:16:08:ee:95:44:13:e2:c6:9e:dc:fe:c0:7e:da:22:
d7:e0:7a:ae:89:6d:6d:b4:3b:36:d4:70:c2:c0:47:70:7a:82:
66:b4:03:e5:02:21:16:e8:c5:3e:d3:cb:00:f1:9b:22:b8:6c:
8f:ab:96:35:8c:47:32:4a:2d:e5:e6:bf:45:76:e8:3a:74:4b:
e2:b1:55:60:95:89:4a:41:c5:25:ed:fc:f7:c6:09:52:44:a8:
38:c2:1a:5d:35:17:2e:43:a7:62:0d:6c:3a:df:21:fe:ef:c4:
52:3c:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:52:03 2025 by rpki-client