Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d1309c0b-4365-3add-a00c-9180c12bc136.roa
File: d1309c0b-4365-3add-a00c-9180c12bc136.roa (raw, json)
Hash identifier: TOUVmnYQC0izKtPRuZ2bvLC8+LfWmufHaku3YZup+dk=
Subject key identifier: FF:E8:74:AD:58:2D:6C:CF:AE:AC:0D:80:9A:1A:29:1C:8F:5D:72:E0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB6609D655AAD63DB42300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d1309c0b-4365-3add-a00c-9180c12bc136.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397233
IP address blocks: 199.7.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:66:09:d6:55:aa:d6:3d:b4:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=6167dbe8-9fcb-4b17-a8b8-5539844cde11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:0f:df:b4:5a:15:35:94:2d:a0:13:c5:a6:
bf:a2:48:c9:28:ee:2f:cf:70:d0:c1:43:80:71:e1:
aa:83:d2:e0:a6:90:e1:c7:b8:39:0b:d0:f7:0e:f4:
1c:a9:89:12:80:53:9c:97:4e:9d:d4:f3:18:17:8c:
84:4c:5a:75:9b:f8:43:5c:f6:14:fd:e6:14:e3:27:
18:23:a7:21:bd:bb:52:a6:0a:7d:84:85:13:55:02:
f7:96:e1:28:13:c6:6c:cd:a9:69:e6:b2:e3:ad:63:
a6:65:3f:dc:67:0a:d8:ec:d3:a9:df:28:c3:27:77:
67:8d:3a:4a:2b:62:e8:a5:ad:cf:24:cd:37:4e:3e:
a9:86:f3:b1:36:2d:71:4a:8d:b9:4a:d2:b3:32:10:
f2:b5:f1:16:50:31:4d:f3:f7:71:c3:3f:20:af:a1:
3d:f6:28:d2:8f:98:8a:f1:66:55:5a:56:32:0a:8f:
95:5e:67:dc:67:9f:33:51:c2:5c:6d:a0:fd:f4:07:
31:3b:47:37:19:77:ca:aa:e2:d2:00:e6:04:e3:0d:
4f:fd:9f:c1:20:f4:9f:80:b1:52:8e:df:39:cc:1f:
23:dd:c4:40:de:1b:f7:9a:a5:64:5b:a7:23:be:3d:
d3:a4:d9:9f:0a:06:dd:cc:55:63:89:95:e5:33:7d:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:74:AD:58:2D:6C:CF:AE:AC:0D:80:9A:1A:29:1C:8F:5D:72:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d1309c0b-4365-3add-a00c-9180c12bc136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:91:2e:3d:23:48:70:af:86:6c:6a:07:c1:67:05:06:07:ad:
c7:23:e4:98:14:b2:3b:d3:5b:ee:a9:c7:44:0a:bc:47:c0:55:
bc:8d:c6:4c:6d:0d:c8:18:9c:4b:57:dd:80:35:db:3e:c3:9a:
23:ba:91:58:06:44:bc:f7:40:b2:a4:0d:92:a5:3f:5e:58:e6:
92:7d:21:df:de:8c:d3:ee:b1:63:d3:3b:51:1b:30:03:70:7c:
cf:c8:7c:2d:69:79:5b:37:2c:6d:c4:15:12:35:e0:aa:70:0f:
51:6a:74:ee:00:9b:d5:49:7d:02:85:ac:85:c6:8c:17:89:e8:
e7:2a:e7:8a:90:76:15:93:58:b0:08:ae:30:cf:86:86:6e:ad:
8f:31:55:d6:bf:85:60:c4:07:bb:29:fd:2f:e8:28:ba:c2:35:
42:a4:19:af:94:52:67:07:5d:57:3c:b5:80:3d:39:3a:e0:c3:
11:4f:5b:20:a7:17:4d:b9:4d:e1:bf:f1:e3:a4:ce:e6:19:2a:
7b:1a:ba:8e:52:c9:9d:e5:c5:4d:20:54:31:41:67:11:e1:e7:
8c:e6:9a:62:4b:5c:b4:23:36:bc:58:db:7c:5f:b4:25:87:c5:
4a:bb:7a:69:af:be:92:f9:bf:c7:50:55:e0:0a:62:8c:95:bc:
e3:49:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:07 2025 by rpki-client