Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa
File: 83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa (raw, json)
Hash identifier: 7c1Fv1dc163J5P4V0jkwwHxTx4lEN/h7XMZuVlM5r8s=
Subject key identifier: 70:C6:EA:89:22:A1:3E:0C:50:FE:49:95:10:38:1F:98:1A:17:29:AC
Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial: 010D0C9F432858491AA6B9FC51115B3EF77C5EC0
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 199.65.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b9:fc:51:11:5b:3e:f7:7c:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=d7d2940d-ee7c-4d20-a352-c34bda40d19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:07:db:84:e5:a9:65:3e:01:51:77:17:9c:
15:6c:05:73:db:e6:9e:6f:e0:a7:7d:c3:0c:ff:1e:
f5:0e:2d:48:8e:28:7f:10:25:52:32:d3:24:97:f2:
54:f8:8f:80:c2:61:a8:43:72:11:50:4a:cc:21:02:
8c:9b:dc:29:7b:39:4f:53:09:2b:40:41:e8:17:63:
55:4d:b2:b5:14:15:91:d1:ea:f7:26:a6:52:57:fe:
eb:71:0f:7b:be:cb:69:86:54:e5:6d:b0:1c:52:11:
1f:4d:68:da:42:4c:34:c6:4a:15:7f:a2:3c:bd:94:
13:87:79:03:28:49:26:2b:48:88:f7:31:34:8f:71:
07:2a:89:40:ac:eb:95:ce:6f:7b:9e:b1:c8:74:0f:
df:96:e3:72:59:88:45:c0:43:09:1c:d1:54:09:2f:
b2:21:5e:09:c6:cd:05:94:6c:8a:ab:0a:91:de:13:
6e:fc:c2:1a:65:0e:b9:8d:c7:8f:d7:a8:11:46:06:
b9:0d:cd:0d:2a:c8:ee:5b:ae:5d:80:cb:9a:d0:93:
a2:4d:4c:06:99:1d:c1:e4:12:39:82:97:3a:9b:df:
62:a5:26:b6:67:fa:e3:be:6b:12:59:09:7e:ea:17:
aa:2c:96:37:82:90:49:b8:94:55:00:49:5c:e4:8b:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C6:EA:89:22:A1:3E:0C:50:FE:49:95:10:38:1F:98:1A:17:29:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
X509v3 Authority Key Identifier:
keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
sbgp-ipAddrBlock: critical
IPv4:
199.65.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:a9:98:35:36:95:24:46:42:43:90:e6:cc:52:22:56:ce:29:
35:60:3f:ac:9f:b3:e6:5b:65:11:4b:a1:09:97:95:b9:3f:e9:
39:51:f3:12:c0:c4:0e:31:58:a2:c0:7c:19:f2:a6:30:d8:f0:
c0:bc:5e:65:4f:16:0f:49:cd:63:80:fe:7d:65:f7:90:4a:3e:
db:8b:0b:9d:bc:4f:9c:ce:77:41:51:8f:ff:fe:1a:9c:2c:98:
aa:6e:2f:4e:b9:dc:76:4f:b7:1f:10:73:fc:5f:eb:d4:c1:7e:
6f:16:e0:83:b9:4d:59:61:d6:5e:a2:82:69:29:c4:2b:b7:4d:
1a:cb:1f:b8:79:92:53:9f:74:2f:de:f2:d8:49:40:ae:eb:89:
cf:45:6c:24:1b:25:26:d2:c4:f8:60:86:31:19:2f:d7:56:21:
1b:c9:34:1a:f8:86:cb:04:5a:26:41:2d:3d:68:6c:50:72:b6:
87:bb:90:77:c9:c9:fe:49:80:72:31:8a:de:90:61:09:36:16:
00:5c:eb:53:e1:2b:d3:6a:08:88:68:a5:65:d8:9d:57:c1:0b:
fe:5e:72:51:e9:e2:0c:e3:e0:b5:04:1b:e5:db:9a:4e:b3:84:
3b:a3:d4:1c:da:a2:14:7e:d1:07:72:cf:ad:e7:df:97:eb:4f:
7e:5a:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:09 2025 by rpki-client