Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa
File: 86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa (raw, json)
Hash identifier: hu4N2Qm4fKqDqkYU+jLK+8Nm/YQXxjCYAqTypoh6CDc=
Subject key identifier: CF:31:74:45:7B:BF:ED:85:59:62:36:93:90:D8:B0:D9:FB:FB:89:2F
Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial: 010D0C9F4328584886B081F15AC90B926202AC20
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 46450
IP address blocks: 199.34.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:81:f1:5a:c9:0b:92:62:02:ac:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=f4fc0d0b-cd04-444c-8855-60ff76ff313d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:1b:d4:ac:62:51:ae:11:e8:ec:bf:0e:62:
ee:70:ca:d0:9b:c2:50:8d:62:83:c5:a9:96:43:ca:
a5:c2:09:be:b0:c3:a0:d9:69:9b:2a:b9:ad:8b:5a:
06:3c:83:8e:f6:a7:e2:c9:f9:01:76:50:29:c7:a6:
da:41:42:1a:35:12:b5:53:55:b5:68:aa:48:81:ee:
e8:44:9a:81:ee:73:81:f1:ce:47:75:93:0b:60:b4:
0c:12:6f:78:27:30:fd:e2:67:0e:79:98:ce:13:b8:
f4:04:d8:02:18:bd:3c:41:c9:fc:a2:de:1e:56:42:
c8:e3:68:06:eb:85:a5:70:80:d3:a2:25:ee:35:16:
32:e7:15:84:85:69:c7:61:f7:cb:13:81:15:b7:0a:
22:15:90:49:8b:11:0d:a3:ac:0f:c8:5c:ad:97:30:
c0:34:45:4e:e5:4a:c6:2d:ea:aa:e6:55:14:bf:45:
3f:f5:5b:4a:d6:2b:91:27:48:78:91:6c:6f:0b:9d:
ab:a9:07:92:86:7e:cb:94:9f:ac:ea:02:83:aa:6e:
95:dc:57:b3:12:c3:42:9d:99:e9:5a:d2:33:3e:42:
36:df:cf:e0:2b:bc:1b:2e:8f:62:c2:e2:e6:59:1a:
69:6f:a7:ab:89:97:de:1b:f1:86:ca:23:7c:04:3f:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:31:74:45:7B:BF:ED:85:59:62:36:93:90:D8:B0:D9:FB:FB:89:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
X509v3 Authority Key Identifier:
keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.34.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f6:6c:c4:77:91:c0:78:ae:f9:76:1a:e6:51:62:1e:3d:ab:
c2:80:d1:21:a6:ab:a5:b4:ce:da:fa:f1:4d:c8:d0:97:1a:71:
1e:11:35:10:70:2c:26:9d:c0:46:1a:37:04:82:62:2b:c0:74:
09:e4:01:6c:88:4d:e0:5d:ed:a1:e0:cb:bf:35:3d:76:59:5a:
cd:21:8e:a1:f6:e4:69:8d:4b:20:c0:d7:bc:b3:94:28:b6:b8:
f7:8a:0c:b8:de:5e:d3:b4:73:1a:00:7d:f9:68:e2:b5:97:c0:
a8:9b:c3:b6:2f:f1:b0:eb:9f:3c:76:2a:6b:15:f6:a2:f6:31:
2b:6e:34:40:a8:83:f4:00:21:32:33:5f:fc:b7:de:51:71:35:
68:ba:8e:ba:c3:3a:6f:99:f6:d3:1a:84:f6:57:49:ab:c9:94:
8d:f8:c0:83:3d:3a:46:c0:65:49:cf:e1:83:ab:e6:5a:d9:87:
5d:43:8f:16:e3:80:67:31:a0:55:c6:fb:a1:83:ed:b9:86:6c:
66:14:38:f9:6d:e7:9a:4d:fb:30:88:50:a0:2c:c9:8e:00:5b:
22:d5:83:1f:2d:60:5d:a5:05:f1:c5:f7:31:19:a4:0d:b6:f3:
d0:9c:1f:c9:9e:d0:a8:e0:d1:00:e4:5a:b4:d7:9a:a0:41:92:
3a:86:6d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:11 2025 by rpki-client