Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5135f06-dd34-371c-a43f-46ce5bba8ab7.roa
File: d5135f06-dd34-371c-a43f-46ce5bba8ab7.roa (raw, json)
Hash identifier: WHtwWTYSYSq0Pn6rehC8oaFHsYrbWT0IFIYF3zGw/ZQ=
Subject key identifier: 10:91:9A:3C:1A:95:8A:41:F3:15:C8:59:D6:52:FB:5F:90:D4:B9:10
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB665A9FBFEB4548B4DA80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5135f06-dd34-371c-a43f-46ce5bba8ab7.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397239
IP address blocks: 199.7.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:66:5a:9f:bf:eb:45:48:b4:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=67e1d3f3-c281-4c5e-b82c-75c7552af825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:31:0e:17:35:a6:ee:19:fb:24:51:71:2a:e0:
09:a3:01:ef:23:8b:53:ec:5d:85:54:ba:f2:5b:27:
02:fb:85:a2:5f:6d:35:f7:e2:9f:47:51:ca:2f:ff:
94:de:59:71:ae:ca:cc:2f:e9:fe:93:c2:d7:6a:6d:
7d:ce:70:50:4b:b2:7f:3a:b4:7a:32:aa:32:f3:fb:
83:54:f2:41:99:da:b6:2b:0b:5b:79:45:77:89:1d:
08:ad:06:64:7a:bb:27:fe:e0:0a:c9:6e:54:66:ae:
bf:af:1a:29:45:03:59:60:fe:89:05:a2:7a:20:bd:
73:47:95:34:85:a1:44:be:37:19:de:ea:1a:7c:29:
1f:de:c0:12:74:17:d0:85:f7:54:96:97:f3:de:f6:
32:20:14:54:aa:86:69:38:2a:47:c2:45:2d:7b:8c:
40:9e:7b:38:15:75:05:db:66:cb:f7:95:5b:1b:46:
c8:6e:c3:9f:c8:55:8e:b1:3a:53:4c:cf:b6:6e:4e:
fe:d2:68:8e:41:e7:81:6c:aa:03:6f:c4:70:a1:ac:
fb:02:af:1f:61:45:63:64:22:1e:66:83:85:51:42:
57:82:46:54:48:f5:4e:c1:d9:69:49:02:00:e7:08:
71:1b:83:3d:ea:48:33:c6:eb:0d:31:b9:78:4b:c6:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:91:9A:3C:1A:95:8A:41:F3:15:C8:59:D6:52:FB:5F:90:D4:B9:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5135f06-dd34-371c-a43f-46ce5bba8ab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:8b:90:ad:27:4a:fa:2a:bf:05:bf:86:99:d6:4b:7e:a7:e3:
40:98:02:6e:79:bd:ba:8b:f3:5b:c4:f9:71:2e:47:7d:3d:f5:
e9:b1:ba:dc:c5:e0:c2:1f:a7:75:55:96:49:bc:35:b9:d3:81:
86:b4:5c:db:42:94:d3:67:19:1f:8d:fb:b2:74:5f:55:be:ef:
87:be:2c:84:89:a7:68:6a:41:7a:68:2e:72:2f:35:8d:de:c9:
18:d5:66:ce:67:c3:d8:0a:27:b5:1a:9e:f8:32:e8:c4:4a:4b:
9f:ec:df:ce:d5:74:7e:7b:fc:b7:49:0d:a7:d8:13:1f:0e:4c:
b9:22:18:5a:ab:68:ad:8d:25:a3:f3:2a:8d:4d:93:de:3b:42:
df:26:2a:f9:dc:b5:a8:98:27:ad:00:07:b4:b5:69:fb:7f:65:
8f:de:82:f5:ab:4b:32:2b:d7:ae:2f:cd:3d:76:a7:8f:68:79:
3c:dd:b0:eb:fd:da:88:58:c6:eb:31:34:3d:6b:28:e2:ac:2d:
3c:2e:97:0a:e9:0e:cd:ed:eb:15:1a:df:89:05:59:9c:29:ea:
40:30:3c:bd:82:18:47:66:1f:df:a9:66:8e:84:d9:1a:4f:65:
21:55:bb:f1:ea:3f:2f:39:86:51:bf:84:41:9b:81:22:c0:c9:
a0:50:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:14 2025 by rpki-client