Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5ea9d2ac-36d3-35f0-99c5-a8427b8ec384.roa
File: 5ea9d2ac-36d3-35f0-99c5-a8427b8ec384.roa (raw, json)
Hash identifier: 2XgJUunBWdbpSugCKSaSgK1YqavRwNzgLqkdcx8kKcQ=
Subject key identifier: D2:D5:DB:FF:5E:F2:D8:F4:EF:BE:65:C7:1B:F6:2E:F4:21:4E:86:0F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F8BDB143F7A3A38B3700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5ea9d2ac-36d3-35f0-99c5-a8427b8ec384.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397216
IP address blocks: 199.7.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f8:bd:b1:43:f7:a3:a3:8b:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=ce594911-38e5-4bc4-abf2-ddf35581d57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:5c:a5:2c:f8:09:38:9f:b9:70:4c:1c:19:
57:c9:bf:95:89:1b:33:a3:6f:cd:52:0b:bb:7f:6c:
4a:ec:35:9e:a7:b2:58:68:6c:f9:20:18:b7:8b:76:
cb:07:4a:1c:04:a0:1c:55:c4:2a:f1:29:eb:41:e5:
5e:28:08:c0:fc:e5:ea:eb:69:97:5d:ef:89:b8:f7:
a8:a3:02:bf:7c:20:7f:60:7a:ae:a0:f3:ad:de:32:
6f:8c:dc:d8:31:14:09:2d:3d:ab:cc:51:8e:8b:57:
e0:54:79:35:f3:90:50:82:3b:3a:e9:4a:da:70:af:
c0:17:20:07:a1:08:7d:1d:3d:d3:bb:82:40:ea:e6:
a4:c6:ea:32:37:96:0b:09:0e:86:45:a9:17:61:8f:
46:84:79:32:fb:df:05:2d:c5:e5:ee:65:d5:d3:55:
4b:9d:3b:50:e4:ac:7b:21:58:72:33:48:d2:9f:6c:
e3:6e:c0:73:58:a3:17:4f:24:5d:cc:32:23:c4:b4:
92:ad:db:f7:8c:01:af:d5:53:c5:a3:ce:a7:73:8f:
f7:d7:6a:10:da:47:ee:9f:7d:39:ce:4b:97:f4:b0:
53:4d:26:ab:06:26:20:f0:dd:eb:fd:d9:26:18:cd:
01:04:fd:70:27:39:07:30:5b:9b:b5:8f:69:a1:13:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D5:DB:FF:5E:F2:D8:F4:EF:BE:65:C7:1B:F6:2E:F4:21:4E:86:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5ea9d2ac-36d3-35f0-99c5-a8427b8ec384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:54:8b:f6:c2:a3:05:0b:53:c7:aa:70:39:1f:b0:19:e0:11:
7b:33:ea:1d:05:04:47:4a:0d:56:b8:59:dd:97:55:3a:08:1c:
42:e5:be:94:1d:35:92:93:be:6b:45:be:d9:1f:74:d3:57:b8:
c5:ef:f9:d7:e0:48:88:67:7e:ef:82:f1:a2:0b:a5:f9:5c:1a:
57:b7:29:f5:63:94:ed:95:75:bf:93:40:b9:43:31:0d:03:0f:
a3:33:a3:cc:6a:ac:74:db:c0:d2:70:c6:de:c3:df:dd:96:fe:
32:69:e5:11:a8:c7:43:18:97:3c:9d:e3:c7:80:27:49:7d:1f:
eb:0e:5c:6b:4b:67:5f:0e:d5:d3:ed:c5:8d:2a:15:4c:72:a0:
12:a1:10:75:12:36:9e:b1:6d:e1:3d:a7:29:35:f5:03:44:34:
ca:3d:7e:a0:03:f3:87:41:e1:7c:95:61:d1:a3:d5:ef:0c:35:
ae:e8:03:a1:a7:9f:33:f7:54:88:14:fd:5f:65:db:10:a0:1f:
76:b5:1c:8a:4a:8d:a6:af:d1:b7:b0:fc:a9:9c:3b:cb:58:5e:
6c:f0:bc:0b:6b:b9:09:cd:84:3b:e5:39:c6:dc:e9:6d:b4:20:
90:1d:45:07:ec:e2:9b:54:dd:62:de:90:24:fe:e3:26:00:70:
ea:d4:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:30 2025 by rpki-client