Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa
File: bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa (raw, json)
Hash identifier: oBvGPq8ymAFfUNwDGNJUdIpAU/six+5HmS1Dzs56dZ0=
Subject key identifier: DD:A8:F8:5C:58:DF:EC:A8:F3:9D:36:32:5C:30:51:8E:26:47:94:A5
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F432858488280879EA970852433786180
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 199.255.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:87:9e:a9:70:85:24:33:78:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=eda95236-bf9f-4358-8ae0-62a488e53a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:24:fb:99:4a:c3:5e:e4:7a:4b:b7:9c:20:00:
6b:ac:f8:ae:ed:74:a6:18:5c:d3:42:0b:4b:ef:02:
10:b5:ad:f7:d2:61:af:e6:35:9f:b0:c1:b8:74:2b:
d3:8c:64:d9:a5:92:f3:21:69:2b:77:52:f2:ab:78:
c5:50:dd:e0:04:82:81:86:e7:f2:1a:6d:85:67:33:
c5:54:82:ec:2c:22:d6:8c:47:a5:94:24:47:85:64:
96:25:0a:1e:4c:36:20:5c:8b:c9:ed:7c:68:87:3b:
9d:f7:05:09:1f:d4:ec:e9:9a:a4:0e:d2:38:b0:07:
13:6b:42:e0:c9:14:ac:a5:89:65:55:5b:c9:59:21:
b2:2a:05:f4:82:cf:ab:09:81:8a:8f:31:0a:eb:77:
ba:bf:1a:0c:02:77:56:35:cf:28:84:d4:8b:36:88:
a6:c1:8b:26:b0:71:0c:27:8e:7d:26:bd:f4:b1:a7:
b1:d4:0e:f4:04:6e:cb:ae:31:72:ef:42:6b:02:98:
d9:d6:d1:b9:e0:82:23:d1:16:74:27:03:24:01:0c:
c0:6d:30:e4:c3:1b:ed:a9:87:7b:bd:a7:16:1e:76:
c3:69:91:0e:bf:88:15:b6:cf:76:fb:43:10:66:1c:
02:a6:48:92:22:f1:44:44:fd:f3:06:03:87:eb:b3:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A8:F8:5C:58:DF:EC:A8:F3:9D:36:32:5C:30:51:8E:26:47:94:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:8b:d3:73:e8:20:a1:9f:40:9b:40:46:6c:40:da:7c:d4:17:
3a:45:28:07:88:5d:42:65:3f:e1:c2:c3:dc:20:44:7e:4c:83:
41:6f:30:17:6d:9a:eb:75:90:db:01:79:76:f0:d7:99:e4:c6:
e1:04:97:43:d6:10:33:a1:53:e5:8f:32:63:16:4b:3d:bd:28:
9b:66:29:a4:0d:9b:73:91:dd:3d:6e:39:b0:16:37:8a:49:34:
c7:ab:e1:5c:28:e1:a2:ee:a5:e3:b7:48:3e:b8:88:b2:27:8b:
2d:60:7a:4d:97:e5:e0:9c:26:26:86:07:a3:9e:74:59:0d:98:
61:6c:6e:51:b6:85:17:de:26:13:8e:f6:dd:7c:6d:c6:73:4b:
bd:a4:03:a4:ec:de:65:a5:67:c7:8a:a4:ed:05:b0:8a:e6:7a:
78:08:0f:99:6b:ff:85:58:83:82:7d:2e:00:11:65:d6:8c:95:
f4:00:25:33:0a:e5:9f:26:88:86:ce:63:2a:1d:2c:58:51:f1:
ff:20:33:44:49:11:e3:4e:1b:2b:4c:10:7f:6c:24:0a:e0:33:
ca:14:b2:01:98:39:15:f8:0c:d8:fe:81:4f:d8:5b:e3:8a:b8:
1a:71:fe:5a:90:e7:72:dd:53:0b:34:bf:1c:f0:ad:c0:da:a9:
44:e9:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:17 2025 by rpki-client