Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa
File: 5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa (raw, json)
Hash identifier: XAHw6USjnbrTwOij6YxT7EjdaNnKLPPqJhcpXOgyIgk=
Subject key identifier: E5:C6:FE:4C:7A:76:C8:70:D2:9D:3F:D7:87:8D:F5:AE:0F:BA:9A:9C
Certificate issuer: /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
Certificate serial: 010D0C9F432858489868751D737625D520219B00
Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa
Signing time: Sun 19 Jan 2025 10:20:14 +0000
ROA not before: Sun 19 Jan 2025 10:20:14 +0000
ROA not after: Sat 19 Apr 2025 09:20:14 +0000
asID: 398395
IP address blocks: 172.99.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:68:75:1d:73:76:25:d5:20:21:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
Validity
Not Before: Jan 19 10:20:14 2025 GMT
Not After : Apr 19 09:20:14 2025 GMT
Subject: CN=e71e9b6a-af3a-4507-9bae-dd8d17e911d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:db:07:c7:26:c3:29:94:90:d1:ca:11:84:db:
76:b0:37:e8:80:be:15:ea:12:1f:f3:74:e6:64:b2:
5f:5d:99:55:c1:a3:9c:67:fd:e5:b1:f2:e8:21:59:
62:bb:ec:33:db:a6:a4:6d:01:9e:00:a1:e7:e5:9d:
2b:dd:69:4b:c6:08:b6:9d:7b:31:ba:cb:95:e0:41:
7c:ec:a6:2d:51:ee:cd:fc:89:86:0e:03:d9:82:39:
e5:16:c9:31:f3:1b:c3:eb:ef:2e:07:6f:6c:63:70:
37:82:75:41:78:ba:db:a9:05:c6:b8:27:31:80:0a:
6e:c2:bf:e9:fe:27:0d:69:85:23:14:3d:e3:14:58:
09:37:8e:f3:d3:b7:df:db:95:0a:81:ad:eb:e1:e3:
fc:83:1e:41:60:30:04:37:eb:33:dc:1b:12:3a:37:
73:e7:31:fc:67:51:8b:61:85:1c:7f:79:05:44:c9:
75:c7:87:3a:7e:57:b1:2d:d9:ff:4a:ef:81:5c:c6:
4d:b3:ae:27:a1:68:12:ca:ea:aa:59:d4:a2:56:cb:
bb:2b:71:e2:97:20:af:d6:83:44:de:30:16:90:a6:
f5:40:c8:c3:b3:5c:1f:87:83:0b:e1:6f:b5:8a:17:
b4:44:6d:d4:66:a7:1c:f9:8d:fb:bc:f6:e2:d3:52:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C6:FE:4C:7A:76:C8:70:D2:9D:3F:D7:87:8D:F5:AE:0F:BA:9A:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl
X509v3 Authority Key Identifier:
keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.99.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:d2:4e:e5:46:9f:0b:b7:83:2c:1b:b2:69:02:59:7a:aa:93:
8c:65:3c:de:16:4b:c1:d9:67:87:55:67:a2:1c:94:ec:f0:93:
43:39:2a:e9:3e:32:c2:ff:dc:e1:d0:18:a5:61:64:df:84:48:
56:55:17:d4:4a:1e:91:6c:4e:f5:08:9f:cf:87:81:b5:d4:d0:
e4:3e:ba:ab:ff:45:5c:90:fb:a0:92:f7:1c:65:d1:ac:02:a5:
43:a7:7f:21:8b:54:65:eb:ce:30:fb:a5:d7:91:bf:12:0e:6f:
8c:3d:f0:bc:60:c8:d1:43:35:43:d5:c4:2d:36:3b:7e:7f:61:
28:06:15:4c:f9:3e:7a:25:75:4a:d9:3b:e8:34:4e:11:13:81:
c2:a8:36:b0:e7:7f:f1:9c:0c:da:da:c7:30:d5:ac:7b:fd:2b:
b6:40:a9:34:1e:20:b5:bf:32:1c:56:77:c0:02:b6:bd:8c:b5:
b4:c1:c3:9e:06:66:51:cf:61:dd:fb:e9:76:85:73:2f:29:0c:
cd:f5:54:1e:40:95:7b:18:a8:99:cf:b6:14:df:28:21:63:f5:
85:0d:c2:31:7c:b3:b3:34:e3:2b:8a:58:7f:97:e8:ce:5d:f2:
ef:92:50:cc:71:fb:e8:4f:33:5f:0c:d8:47:e5:96:5a:a5:b4:
ef:2e:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:32 2025 by rpki-client