Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/20317159-9aca-3178-8c8a-6141107ab5a4.roa
File: 20317159-9aca-3178-8c8a-6141107ab5a4.roa (raw, json)
Hash identifier: lj+BLqatgyHenaaAHgik4MUE0w3u85o2QlWPPB084rQ=
Subject key identifier: F5:63:09:CA:9F:53:CE:B9:16:02:B3:1B:48:B9:93:A8:59:7D:63:6A
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F43285848B2798C73B0AC751977CD3040
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/20317159-9aca-3178-8c8a-6141107ab5a4.roa
Signing time: Tue 28 Jan 2025 18:25:41 +0000
ROA not before: Tue 28 Jan 2025 18:25:41 +0000
ROA not after: Mon 28 Apr 2025 17:25:41 +0000
asID: 21949
IP address blocks: 199.33.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:79:8c:73:b0:ac:75:19:77:cd:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Jan 28 18:25:41 2025 GMT
Not After : Apr 28 17:25:41 2025 GMT
Subject: CN=58d76a5c-e04c-4058-807f-d0c6da36c694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bb:c9:bd:c6:bc:22:34:98:93:fa:bc:8f:2f:
ec:27:19:19:fe:2d:ec:5a:d1:01:8f:d6:3c:b7:97:
19:f6:ef:2e:df:f1:01:99:0b:26:4e:a9:18:6b:96:
e1:e5:2d:1e:d5:a3:0a:2c:77:8d:b4:59:93:be:49:
77:43:40:38:a9:8b:ec:a0:58:85:68:91:89:d8:71:
59:04:db:12:b8:4e:7a:05:2e:88:e1:04:9d:c4:68:
5e:44:11:1c:f1:0c:62:32:42:e8:66:8f:1e:b6:03:
06:45:3d:d8:61:2e:60:c8:3b:9b:1b:8d:f9:77:d8:
85:fe:c4:d8:12:6f:2e:46:e1:fe:da:02:75:10:8f:
65:15:1a:c5:b0:d5:27:f3:36:aa:76:9a:fa:f8:23:
69:ad:47:0c:96:ca:7a:d8:3d:ec:63:2f:20:d9:16:
65:a4:e1:1c:e0:b7:41:e4:bc:08:70:fa:c4:9f:fa:
f4:ba:d3:76:a7:fe:df:8d:27:be:71:aa:62:c6:9d:
ea:b3:18:4e:2d:e9:eb:cb:8f:d8:9e:a9:a9:25:8e:
12:22:5c:71:b8:44:c1:63:db:c2:98:28:bf:1a:12:
08:b3:84:6f:8f:32:42:8d:af:bc:61:76:73:7a:94:
c6:4c:1e:a3:c2:1c:d7:86:ba:8e:09:02:08:54:7e:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:09:CA:9F:53:CE:B9:16:02:B3:1B:48:B9:93:A8:59:7D:63:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/20317159-9aca-3178-8c8a-6141107ab5a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.33.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:cc:75:88:c2:68:3e:c6:94:aa:68:95:6b:bd:39:8d:4d:03:
5e:85:39:ab:17:a4:43:5d:67:d8:a3:c9:36:92:ec:c5:ec:28:
a4:60:ca:e2:b9:3e:9e:3e:a4:77:5d:be:c5:97:ee:3c:49:25:
30:87:b8:74:39:1d:1d:a5:dc:19:bc:97:f5:62:8e:99:88:42:
de:5a:6a:8d:1e:7e:fa:7a:dd:19:5e:1f:db:53:74:4a:04:4e:
94:73:bb:37:9b:f3:7f:d9:52:b9:f5:70:85:8e:90:71:3d:b9:
06:5c:a8:86:06:94:99:2a:32:5d:f9:2e:b7:8b:63:42:8a:3d:
af:53:59:f8:e0:e6:09:43:23:c1:f4:a8:2b:0e:aa:13:ba:5f:
f2:96:9b:52:4b:8b:ff:01:bf:55:9b:ea:3e:2b:42:be:69:16:
f0:78:40:21:c2:3a:b9:4e:41:e1:22:02:53:e8:7b:ee:f9:a2:
6b:8f:d5:8d:df:5d:6c:66:16:bf:7b:79:e4:8d:4c:5c:4a:fc:
b5:ee:81:ee:96:f3:cc:06:56:25:45:ea:a9:26:3a:09:b9:ae:
6e:ee:44:32:af:8c:83:ca:f7:0d:20:81:89:b5:ce:41:98:00:
76:7c:13:38:b3:b1:31:8a:14:bc:54:d3:6a:c9:1b:5f:6b:56:
78:9f:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:35:07 2025 by rpki-client