Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa
File: 0d363d93-28e0-3322-8517-a1ebec3877d8.roa (raw, json)
Hash identifier: LqhKIx+0iYWl/t18xporbSW9UuycTbnGGlZYpMieezg=
Subject key identifier: 30:2A:AB:5A:D3:55:14:53:5B:5A:AD:50:0F:F0:2B:F3:14:8E:4B:E3
Certificate issuer: /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
Certificate serial: 010D0C9F4328584902EC1886A4954AD8AC4A7880
Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 209
IP address blocks: 199.191.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:18:86:a4:95:4a:d8:ac:4a:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=248c413f-4702-42f5-8f40-f9d42f7e72b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:14:9a:32:07:6f:a8:c1:e1:ae:61:97:2c:
df:b6:bc:1a:90:20:77:4e:92:26:74:e4:5a:f2:21:
14:e0:43:ed:73:f7:77:f1:99:e9:2d:70:33:26:80:
c7:b9:c2:10:57:df:7b:1f:96:52:42:02:b7:82:5c:
5a:aa:43:90:b4:9e:e9:0d:49:9d:99:1a:7f:68:3b:
82:01:de:43:ef:54:74:c2:89:86:1c:d7:b8:78:8c:
4f:19:5e:7a:48:b0:35:53:7d:5a:02:19:09:4f:c0:
42:ac:b5:c4:d6:19:2c:3f:34:82:65:3c:c0:6d:38:
e7:5c:95:93:e2:ec:53:55:a6:b6:46:e7:8f:13:3f:
e2:42:51:eb:71:b1:d7:f5:83:22:ab:97:07:ac:99:
53:7a:51:f2:31:7f:0e:d1:de:bb:9e:10:1b:01:a1:
e3:77:af:6b:e1:0c:e3:ad:b4:a9:8f:6c:50:9f:41:
e1:5d:97:a4:77:d2:11:55:a6:9e:27:22:7f:16:8a:
16:76:2b:f1:69:71:cb:82:ec:5a:91:b1:ba:c8:95:
f6:f6:eb:b5:30:d4:05:20:a3:97:39:1f:0c:29:45:
71:7a:11:64:ef:ba:b9:63:f8:d7:bf:8a:b1:a3:2d:
c2:4b:a0:40:4e:32:94:00:2b:0a:63:16:20:2c:79:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2A:AB:5A:D3:55:14:53:5B:5A:AD:50:0F:F0:2B:F3:14:8E:4B:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl
X509v3 Authority Key Identifier:
keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
sbgp-ipAddrBlock: critical
IPv4:
199.191.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:03:90:85:62:3a:a6:81:d5:91:1b:8b:57:9f:83:c1:dc:23:
11:f9:44:60:ea:fb:1e:27:fd:1e:d2:dd:c5:7f:11:fc:47:0a:
7e:cc:c4:33:ee:37:19:84:ba:2c:b8:01:0d:49:17:57:a1:a5:
98:2f:88:5f:16:2d:2a:52:91:29:93:9c:3d:f3:ac:0b:f9:44:
0e:96:69:15:29:1f:15:bb:49:2d:af:21:74:76:4f:41:86:3c:
40:a4:8f:4a:05:a5:8c:5b:4e:ef:91:2d:2e:48:7d:f9:c6:59:
67:83:65:b6:ee:ef:0a:10:7e:6f:f4:16:49:b8:62:d1:c1:17:
dd:13:5a:63:1b:d2:58:5f:55:ca:55:b2:24:7e:78:f2:1b:7c:
37:20:8b:33:98:66:6e:dc:d3:70:72:c8:c7:d8:13:88:bb:71:
30:fc:57:32:61:fc:4b:67:6e:53:0b:d2:14:06:6f:ae:1c:6b:
59:1f:66:3e:4a:a9:2a:98:58:26:a9:d9:d2:d1:2c:c1:3e:ac:
e8:b2:7a:90:57:c4:c4:13:1b:cd:f8:37:3b:67:af:5c:64:71:
3c:1d:79:dd:9c:32:1e:a1:23:be:c7:52:b7:7b:b3:85:69:2a:
7b:d2:af:82:31:8d:ca:82:30:ad:a0:7c:81:ea:6d:05:6d:3d:
ba:29:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:46 2025 by rpki-client