Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa
File: 2b0ee5da-394f-3856-9213-54a1585985fc.roa (raw, json)
Hash identifier: 1a0tH2h6UVVNJpgRit+MsWRVe/zErXoiRMKw4NOuIvM=
Subject key identifier: AA:24:F8:12:F9:52:CC:74:B5:B7:96:A7:9A:A7:90:BA:36:4F:87:18
Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial: 010D0C9F432858485B6AF29E8A5BDB373AB97C40
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 14500
IP address blocks: 199.182.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f2:9e:8a:5b:db:37:3a:b9:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=08e033f2-8770-45d1-a3f4-3e279e39ca45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:1d:3a:c1:98:af:c8:84:0e:fe:45:17:d0:
4b:64:d5:1d:8c:ac:b1:b7:b4:54:3d:b0:04:52:ee:
d2:a3:17:2c:f0:9d:48:39:5f:54:3d:3d:17:2b:8c:
67:d0:a4:87:89:e7:aa:5b:c3:f4:ce:98:10:d5:44:
b7:f6:1e:8a:53:de:44:22:80:71:76:2b:27:81:24:
24:66:d1:5e:1f:a6:e1:35:23:92:89:b0:24:b0:f1:
30:bc:90:a8:16:c8:9d:4c:fc:d1:ec:5a:ee:08:b0:
7f:f7:62:52:51:ff:bb:5d:aa:85:ae:80:67:8d:a8:
c8:02:61:a1:e1:3c:5a:4b:e6:91:6b:33:d5:7d:5b:
ef:d9:e4:be:e8:e3:51:22:0a:7b:d4:61:e3:3e:fd:
bd:6f:af:25:14:66:1d:64:a7:a0:5b:81:10:6b:cf:
d2:28:a9:d5:f8:cc:5b:17:73:40:4c:cc:a9:ea:51:
a6:64:ee:23:ec:c6:0d:33:23:b3:da:17:53:28:37:
e1:72:38:17:4c:2d:85:ab:e3:f5:7a:06:3a:95:c3:
f1:48:20:78:85:6b:91:2c:0d:fd:53:d7:f7:a5:c1:
ee:b7:9f:15:d7:14:57:ea:f2:b8:cc:59:8d:7e:44:
8c:dc:bc:8a:ba:8a:1f:b2:fb:b7:e1:86:ed:17:f3:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:24:F8:12:F9:52:CC:74:B5:B7:96:A7:9A:A7:90:BA:36:4F:87:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
X509v3 Authority Key Identifier:
keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
sbgp-ipAddrBlock: critical
IPv4:
199.182.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:30:02:fb:81:7e:d4:a9:60:ca:02:14:60:0e:cd:2e:a7:e4:
14:c0:31:15:d0:7c:65:ce:41:d5:a3:9e:e0:58:11:13:6f:fe:
ee:ea:ea:7b:3d:ad:e4:39:32:b7:f3:02:21:ae:63:95:88:7e:
22:b9:1c:82:76:37:9d:86:62:68:c6:64:16:cc:b6:b4:09:70:
4a:ea:81:33:a4:b8:bc:28:12:d2:1d:c7:72:67:56:95:53:bd:
16:f9:13:f7:9a:10:94:f5:65:18:70:87:b4:de:a2:0a:ee:a3:
9e:0a:f6:d0:33:95:41:e0:4b:5f:8d:74:da:26:4f:44:57:47:
64:10:5a:fe:bf:02:49:2b:1e:73:b9:8b:55:63:00:f5:db:ce:
38:00:53:64:34:17:98:d6:f2:aa:ac:9b:7f:82:b4:d3:ec:65:
c7:62:51:f9:83:e9:01:97:84:54:07:1e:fb:2e:9d:40:25:c0:
d5:b1:91:02:62:c1:91:a6:f4:8e:51:8b:a6:42:f0:c1:a5:50:
d7:59:a0:82:c9:f0:38:96:c3:86:af:61:89:72:b7:4f:29:33:
82:82:dd:fc:b2:29:50:d4:8e:7d:3e:46:e5:c1:5f:d8:cf:e3:
5c:62:a7:cb:1e:bc:88:fe:92:20:b4:ab:ff:12:8c:09:55:d6:
9f:ec:ed:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:28:36 2025 by rpki-client