Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa
File: 6f7d065b-e8db-3eae-837a-394398429919.roa (raw, json)
Hash identifier: 3goQ7g7oTsRfRZ/q6fdjUy/Ke0iBDy9rpBFdVaCKwtc=
Subject key identifier: AA:E3:83:31:F4:93:F0:E2:03:B3:AF:B8:7B:AA:9B:21:10:5B:97:43
Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial: 010D0C9F432858494303F3C94934AF3333D3BC80
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 979
IP address blocks: 199.7.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:f3:c9:49:34:af:33:33:d3:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=a4da610c-4653-419d-b6e5-85e4b21070ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:e6:8f:55:d4:c7:70:33:ec:a0:e4:99:bb:
ad:c1:e6:ba:4d:b9:66:0d:cf:97:b8:c0:2e:40:d1:
8a:d4:5f:9d:c1:ec:71:4c:3d:bf:da:29:33:08:1b:
f1:fc:c6:c8:c4:e1:fe:07:8f:07:7a:df:39:c7:b3:
b0:90:14:97:6a:8e:7f:08:07:eb:4c:06:78:40:77:
c2:f9:ff:d9:51:e6:d3:89:2c:6e:08:93:fd:3e:69:
17:27:ea:b0:d1:f8:a4:90:43:81:77:63:68:e1:3b:
04:80:4d:ab:ae:0b:56:c7:99:f0:e3:2f:2d:2c:1e:
f7:fe:93:7d:14:cc:a4:bd:69:30:02:2b:9f:e2:98:
98:87:d5:e3:b6:c0:2d:06:f5:e9:69:5d:93:5e:8b:
3d:03:df:5c:be:42:5a:19:20:bf:45:8a:05:31:b6:
d7:27:5e:ba:da:de:e5:69:50:74:45:7c:58:fe:d2:
6a:ca:ae:3a:c1:a2:36:5b:8f:43:d0:dd:f1:bc:1c:
43:95:39:28:8b:91:f6:a8:2f:03:76:fe:62:0a:0e:
c9:47:9c:6c:da:1f:50:67:96:a3:32:da:55:37:ef:
c9:82:d3:88:7f:17:db:15:e8:96:0c:fb:9e:60:d8:
92:11:2e:10:55:a6:92:bb:d6:05:47:ab:14:9f:6a:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:83:31:F4:93:F0:E2:03:B3:AF:B8:7B:AA:9B:21:10:5B:97:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
X509v3 Authority Key Identifier:
keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:f6:25:d0:d6:ba:a2:1f:df:b9:c1:05:ae:9f:a2:55:f5:8c:
4e:2d:23:01:17:08:d9:b9:bd:00:75:d4:16:31:56:e6:82:a4:
30:b9:55:15:4a:87:9f:e5:cc:f9:a2:44:30:e1:8a:cc:c9:2c:
76:15:6b:9a:5d:dd:45:76:96:86:a1:d5:6b:d0:07:f1:d0:7e:
60:57:68:f0:9f:48:1f:b0:7c:aa:6f:2c:31:27:a0:75:dd:f7:
8f:5c:66:16:50:7f:fb:86:0e:d6:8e:25:0a:8a:c0:d1:d4:80:
1a:8b:b0:1b:88:24:ac:b6:33:32:80:88:21:f7:23:f8:62:b0:
87:66:f7:4e:dc:04:c5:06:b7:2a:4e:c3:54:5c:21:6e:98:57:
d3:91:55:ac:ea:aa:9f:2e:3a:2d:da:b1:91:0e:40:d7:9b:9e:
76:1c:ea:62:1a:30:f4:6a:82:60:07:47:87:2a:2a:69:1b:bd:
b0:91:6c:1e:c3:fb:fa:30:dc:7f:a3:b2:64:63:18:cc:90:c1:
92:cf:fc:bd:f2:23:20:51:c3:49:1a:94:9c:d0:c5:b5:f4:62:
76:71:1f:2f:e8:6b:82:10:17:c1:74:3e:a9:9d:63:33:36:c7:
d2:21:57:7a:06:61:9a:11:a6:99:72:71:b4:04:39:2b:29:ae:
e7:71:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:45 2025 by rpki-client