Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa
File: cae92603-341e-3d54-9fda-0cf1e572484c.roa (raw, json)
Hash identifier: piRY+iuzNKLhIXbEqD1nAroy699H2EWW0BSSak0G30A=
Subject key identifier: 1C:31:56:29:7A:B0:17:0A:55:D5:ED:9A:0B:EA:07:B1:E6:31:19:B6
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F43285848E59BB3AAF7F81D0E12B43C00
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 21949
IP address blocks: 199.247.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:b3:aa:f7:f8:1d:0e:12:b4:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=18c8f7f1-5c6a-4e8a-954d-68d74369f8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bc:a7:cc:fe:3b:c5:76:1e:5b:a3:e1:06:48:
39:78:af:7d:af:a0:c4:72:ef:46:23:ed:0e:e0:a1:
97:9f:81:3d:b0:2c:19:8d:fc:1d:45:57:7b:92:7c:
69:e6:49:96:49:91:11:d5:1b:b8:4e:44:67:65:c9:
29:00:ae:b6:24:2b:1e:12:67:22:74:d0:8e:2b:3e:
22:15:bc:99:05:76:25:7d:79:dd:30:c7:06:12:d3:
8c:15:97:0c:eb:d0:2b:c7:50:97:0d:33:00:9e:ec:
5d:4b:fa:7a:a1:3c:25:fc:67:46:d2:fc:98:5c:5b:
31:a9:49:c5:84:1c:ec:92:6e:0d:bc:e2:ce:4d:2c:
f2:1b:14:bc:db:09:e0:26:a3:de:7e:d7:f3:db:3e:
da:da:45:84:56:dc:93:51:71:28:44:61:b8:b5:41:
fd:9d:b1:fe:65:1e:d2:21:61:5e:3e:4b:d4:8d:d6:
9d:35:be:69:7b:65:49:8a:1a:f1:d3:16:ad:d1:2e:
e2:e3:23:4d:61:de:58:5b:54:f2:8d:49:b3:61:ef:
cb:b1:ed:9a:4b:0a:17:9e:c8:78:04:2e:44:27:aa:
34:7f:9e:dd:39:17:65:f6:51:20:9e:b1:34:e9:05:
8b:91:22:26:ce:5b:c2:a3:d0:d4:53:c8:1a:79:17:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:56:29:7A:B0:17:0A:55:D5:ED:9A:0B:EA:07:B1:E6:31:19:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.247.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:75:4d:73:25:af:a5:09:79:52:18:13:e6:21:48:43:a9:f8:
72:85:a3:81:b5:e5:12:b3:30:f5:c2:04:14:4f:c7:e5:f7:9f:
54:68:02:00:35:5d:f3:b8:49:e5:60:6f:c2:67:96:54:ee:2c:
3f:33:f3:e8:73:fd:ac:93:0a:36:21:35:c1:ba:90:9a:89:ca:
02:86:6c:47:0d:42:1d:bb:f0:17:9d:f8:cc:e3:ea:81:b8:a3:
7a:22:c0:71:c8:a0:79:c1:cb:a5:85:aa:ce:1c:7d:a6:00:83:
92:eb:fa:0b:24:85:f4:cf:73:49:20:66:6d:3d:b5:05:86:90:
ca:69:05:42:c5:aa:5a:bc:8a:42:17:1c:c2:76:36:56:85:4d:
92:a3:f7:0d:14:1e:cd:0c:12:3f:cb:ec:ce:e5:74:5a:05:3a:
fa:6e:46:e9:df:66:53:41:ea:23:58:8b:09:53:2d:6e:e8:cf:
d1:64:18:56:99:1a:71:a4:dd:59:b6:8f:9c:88:7e:dc:a4:48:
a4:f3:64:b1:10:30:7b:f9:a1:5b:16:43:3e:50:2c:89:b5:e4:
25:e9:a1:c1:50:ad:1f:27:e0:33:0e:d0:2c:c5:4a:8e:21:1e:
8c:6d:56:1a:89:b9:f5:ab:97:57:22:17:0d:6e:f3:90:ec:dc:
45:a0:f7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:41 2025 by rpki-client