Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa
File: e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa (raw, json)
Hash identifier: Cz+XL9lB/x4SLQNUfsPHWyX2eAR57FPuPx9YVYhwO8k=
Subject key identifier: E1:24:FA:76:AA:08:0C:6B:82:1F:E5:A6:F0:B7:50:32:7D:0E:1C:EB
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F43285848D641106F24C39F3D8BF1D1C0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 21949
IP address blocks: 199.7.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:10:6f:24:c3:9f:3d:8b:f1:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=fdfd75a2-fc35-43eb-b638-19f00280fee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:aa:66:0e:f9:1f:70:51:f4:ff:c5:dd:e9:d8:
73:0a:51:10:17:2e:4b:96:39:c1:05:bb:e8:64:14:
17:c0:9a:2a:29:a5:0c:83:49:32:f9:51:bf:a1:32:
20:40:47:c9:0e:b1:d0:0c:8e:b1:57:f1:25:17:98:
12:6e:40:32:52:93:6f:ca:a4:c4:fd:dc:91:28:16:
12:ec:f8:31:f6:fb:a4:3a:b7:cf:21:8b:c5:af:12:
38:ef:32:37:78:46:a8:22:a7:bc:ba:58:a1:ff:61:
ff:40:55:5a:3e:82:fe:b0:6b:66:6f:1b:c2:7c:77:
9f:85:ea:ed:7b:4d:95:e3:9d:98:d9:6d:c0:d4:a8:
7d:66:dc:a7:34:2c:bd:30:78:9b:59:d5:b4:cd:5b:
bd:10:b2:a8:80:a8:b9:a5:35:3d:36:b0:f5:4d:05:
02:e7:06:06:95:9d:1c:1b:80:15:82:bd:c8:e4:cd:
23:42:61:d1:ad:8e:3e:bd:b8:4f:5d:a9:4a:de:95:
75:f1:20:26:21:bc:2f:91:67:a2:47:06:70:29:b6:
75:06:68:c0:f1:f5:f7:9d:f1:a3:23:c3:1a:5e:67:
5b:65:22:27:c2:15:7f:9c:c5:24:30:f7:12:62:f6:
d7:77:84:0b:04:cb:43:bf:49:c7:05:14:12:10:df:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:FA:76:AA:08:0C:6B:82:1F:E5:A6:F0:B7:50:32:7D:0E:1C:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:76:34:f6:5c:fb:12:54:9d:00:ae:08:5f:25:01:39:ce:cc:
75:4f:1f:6d:af:75:b3:4c:69:93:af:63:47:c9:01:f5:4a:6a:
51:ef:78:d9:14:09:0e:a0:29:0b:8a:a1:a2:7e:75:20:2d:dd:
85:43:fe:d6:b0:b2:39:fb:e9:b9:4d:0d:70:8e:4c:54:63:0f:
e3:42:4a:a6:e6:c0:55:40:52:41:30:80:31:30:28:73:2a:d2:
2a:5b:f7:70:4d:cb:69:4b:30:8c:7b:91:71:1b:fd:9c:11:98:
b5:09:62:2f:65:b8:33:83:61:36:c5:c1:bf:c0:8f:15:53:dc:
50:c1:d6:20:51:90:39:c1:e8:5f:ae:cb:89:dd:6c:b9:a8:a3:
0d:9e:87:87:b6:fb:9f:54:b4:6d:75:d0:9f:4d:f6:3e:05:97:
03:d7:75:90:ad:68:e1:43:b8:27:59:fd:df:f0:6d:e9:d3:c7:
66:38:f2:13:72:4d:83:c2:a0:66:ee:15:cc:84:71:59:9e:37:
b1:b6:4b:b7:c0:54:75:da:77:1a:1f:d0:35:ff:ee:ad:51:2a:
3c:a6:e2:42:b9:91:f1:45:d6:68:36:5c:eb:cb:6c:a4:da:a7:
d8:64:22:22:c3:0b:45:c8:6b:ef:8f:31:d5:76:02:2f:32:b1:
69:d1:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:59 2025 by rpki-client