Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa
File: fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa (raw, json)
Hash identifier: wyCuhyIdF8D5uAbb7au6sHmsC0iddyG769ryhcRPR3E=
Subject key identifier: 63:C6:01:9A:B6:24:C3:07:DA:55:74:20:FE:7A:A1:17:E9:56:D1:AB
Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed
Certificate serial: 010D0C9F4328584894A5E4D91CE34A0368BFCF00
Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 209
IP address blocks: 199.253.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e4:d9:1c:e3:4a:03:68:bf:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=4dc97e7a-26c5-4565-b315-4a67a566e5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:fe:c0:08:32:47:88:87:d7:96:3e:87:a8:
80:28:1e:78:a4:e3:19:99:e3:f4:61:78:63:97:5b:
02:f6:c7:fb:4f:db:4c:3e:49:d3:71:1f:c5:f0:f3:
c3:05:77:79:40:9f:21:32:73:e3:d0:da:2c:3e:5e:
34:77:b0:7a:48:21:5c:3f:d4:94:61:c5:42:65:03:
20:94:f5:c7:65:85:a7:ec:2d:83:cd:75:f0:3e:91:
2f:95:f2:b1:ac:61:57:11:d7:ae:ec:9d:04:db:67:
67:d5:65:68:5b:94:ac:8c:9a:ce:74:20:4f:69:bf:
cb:3a:9d:e3:bd:f4:61:b7:2c:af:b4:29:35:73:17:
bb:47:98:33:88:f8:ff:8d:3d:9e:d6:6d:e5:75:7e:
33:1f:a7:8b:ef:91:b4:e6:93:b8:d5:5b:f8:c4:89:
11:0c:42:e4:b5:6c:a0:d3:cd:61:37:7e:12:d5:ad:
d7:6f:c2:fb:0a:db:1a:a7:99:3d:9c:84:4d:0c:6c:
66:8e:cb:df:0f:8d:24:96:e5:e8:2a:5a:64:77:9c:
9a:cf:65:b8:30:44:92:ca:ee:c8:27:36:03:58:b6:
57:64:f8:19:93:71:76:ee:b6:18:89:f6:25:ab:7d:
1f:32:9b:1e:8d:f0:6f:26:26:bb:7d:66:98:69:a3:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C6:01:9A:B6:24:C3:07:DA:55:74:20:FE:7A:A1:17:E9:56:D1:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl
X509v3 Authority Key Identifier:
keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer
sbgp-ipAddrBlock: critical
IPv4:
199.253.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:9a:56:e3:67:1d:67:87:cf:42:7e:9d:8e:e3:4a:bf:ea:dc:
1c:18:51:fe:a8:fd:ce:b9:22:b2:b1:16:e2:bf:29:3f:ec:6d:
2a:f2:09:80:50:57:1f:af:48:11:ef:c9:ae:c5:48:fa:05:97:
4d:df:0c:eb:5c:2b:05:3b:43:86:81:87:7a:8d:f4:01:0f:f1:
bb:f7:a2:2c:05:c2:34:77:be:88:90:01:f8:66:6d:9b:83:a4:
d3:42:cb:99:71:ce:44:dd:85:dc:e9:06:06:55:6f:13:e5:86:
85:fe:a7:b3:91:d9:ff:86:67:a1:30:dc:75:16:d8:8f:f2:8c:
59:6d:bd:37:99:10:93:10:81:c2:8b:71:31:3f:c2:13:b7:4d:
1c:62:c8:e3:12:1a:4e:bc:fa:f3:a5:87:cf:4c:32:53:c8:6c:
26:fa:63:f4:2a:e5:8c:94:df:cf:94:2e:32:be:54:65:6a:56:
da:f1:d9:73:c6:89:7d:14:4e:8e:67:0f:eb:96:59:2b:ab:d1:
95:72:47:83:f2:e7:eb:12:6d:d5:4e:4b:1b:18:91:20:0b:6e:
51:a7:8b:59:4f:cd:a3:1d:4b:23:8d:34:c0:0f:36:a6:78:4d:
09:da:fe:3c:a8:d5:67:62:38:d4:b9:c9:d3:f9:53:b6:d7:c6:
2c:b8:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:20:30 2025 by rpki-client