Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/c15d4a3f-8e70-3d2a-a0ee-a1eca396d07e.roa
File: c15d4a3f-8e70-3d2a-a0ee-a1eca396d07e.roa (raw, json)
Hash identifier: 5i2mTBdwdkRmdfnAWltvhesRQcaWqguGFalsh4RWR7I=
Subject key identifier: 36:5B:97:7D:FB:0B:34:4C:45:DB:70:71:13:C7:56:DC:47:45:B5:8A
Certificate issuer: /CN=17c62883-899d-4b86-8800-e9715d10a482
Certificate serial: 010D0C9F432858490B4C2212127688F85085DE00
Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/c15d4a3f-8e70-3d2a-a0ee-a1eca396d07e.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 55155
IP address blocks: 199.175.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:22:12:12:76:88:f8:50:85:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=af9f974e-5813-4e5b-9d69-1dc25f109134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:32:51:e6:97:ba:e2:9a:f0:0c:ab:e4:19:
66:6a:2f:4b:8b:79:da:ed:a1:b3:5a:fd:25:dd:04:
34:b4:56:0c:d9:7c:4b:2c:ae:45:57:e0:ab:90:da:
df:f2:38:08:45:dd:65:93:a3:78:c3:1f:ac:dd:65:
71:a5:72:e4:b1:15:e8:7a:84:52:ff:24:58:f5:9d:
f7:93:ce:df:40:2c:6e:2b:29:06:b2:4c:85:6a:99:
62:28:b5:9b:d4:0e:e1:f0:44:8f:88:19:95:e3:53:
4d:c7:37:aa:ef:44:1f:be:38:72:0f:1f:39:4f:95:
bb:db:0b:45:e5:b0:ff:c0:5a:27:79:99:d4:ee:b9:
9f:dc:1e:2a:19:e8:28:63:2b:f9:cd:89:b7:cc:02:
7d:c5:6d:3a:f5:bc:d2:2b:20:c4:10:59:80:d0:99:
1b:3c:02:19:39:83:2c:89:cc:14:0c:28:aa:de:07:
f2:d9:be:b1:14:f4:62:8a:4a:27:a0:f9:6f:97:05:
96:07:1a:be:3e:51:50:9a:c2:03:e9:ef:1c:a5:6b:
cd:df:79:84:2d:28:a3:80:da:8a:ba:40:ab:08:ea:
94:0d:5f:89:2e:e9:bd:d4:b4:15:04:60:31:91:34:
3e:45:2e:dd:c2:5b:4d:ff:7c:14:75:57:f5:d1:60:
e1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5B:97:7D:FB:0B:34:4C:45:DB:70:71:13:C7:56:DC:47:45:B5:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/c15d4a3f-8e70-3d2a-a0ee-a1eca396d07e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl
X509v3 Authority Key Identifier:
keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
sbgp-ipAddrBlock: critical
IPv4:
199.175.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:7b:27:05:8f:bf:ae:93:3a:e0:01:e1:a7:3b:f3:d4:e8:04:
4c:ec:29:d1:3c:af:25:76:67:f5:8a:89:d1:55:b5:d3:77:d2:
e7:1b:9d:26:63:f4:05:fc:19:11:d3:fc:40:3b:51:56:39:82:
92:3b:38:71:f0:d2:57:9c:a9:04:19:ff:f3:a3:80:4a:ef:f5:
d6:11:b3:40:7e:38:f7:93:bf:7b:d3:b8:06:c5:03:d3:28:36:
d0:2c:06:cf:2c:46:af:87:66:2f:7e:d7:d7:4d:e1:6a:be:93:
c7:89:f8:d0:86:45:9c:a2:a3:b8:b3:c8:47:4d:ea:f2:b3:39:
86:bb:06:43:a2:be:72:3c:03:1d:47:32:47:dc:a2:69:e7:47:
d3:68:81:63:87:fd:91:e8:15:4d:3c:75:18:c3:96:98:95:1a:
cd:92:fa:01:85:30:2d:b3:44:ed:dc:1b:40:33:3f:fa:39:18:
b1:90:63:9e:b4:20:c3:fd:7c:e4:da:d8:72:7a:e3:18:4a:87:
48:b0:b4:f8:1d:00:ad:9b:64:2c:c9:ae:96:8c:f6:59:7e:16:
7f:58:4d:30:94:9d:db:59:86:44:a3:29:bb:b5:61:24:5d:94:
8d:7c:59:29:d3:7b:14:f0:a3:00:20:82:b6:34:78:2c:e4:cf:
5d:c7:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:20 2025 by rpki-client