Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa
File: ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa (raw, json)
Hash identifier: PNhDJxyJw0IFQjRF/VnkJkkfEIilqDCRycXKhx0f9UI=
Subject key identifier: 9E:15:4C:D7:B2:A5:7E:AB:82:98:DD:32:23:23:A6:5A:13:6E:64:61
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F9A158BCF99815B074C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397232
IP address blocks: 199.7.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f9:a1:58:bc:f9:98:15:b0:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=fecd1791-e998-486f-9274-d83bd4750da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b7:15:30:53:bf:c6:be:e8:fb:83:af:ed:3e:
a7:f1:5e:60:56:4d:52:b6:e2:2e:6c:14:ec:e5:08:
b6:82:3d:2b:b9:88:29:67:ad:bd:b2:c9:e7:e0:e7:
df:ef:74:38:a4:d1:75:58:fe:db:4e:ab:68:e1:ee:
8a:56:61:01:42:c0:13:af:65:40:9e:da:49:19:7d:
76:44:58:52:f8:35:b1:19:e6:1a:3f:17:bb:e9:1c:
e1:a9:ea:5d:15:d3:11:9c:ab:d7:80:b0:ac:68:89:
9c:61:1a:f3:83:d5:df:99:f0:50:36:4c:04:d4:bd:
07:35:77:24:69:0c:1e:24:e6:fc:9e:fe:b5:c5:d8:
93:57:c7:eb:8d:38:0c:95:76:6b:a4:43:08:c3:97:
24:37:ff:19:b2:ec:b8:43:47:4d:81:fe:84:a1:85:
a4:83:32:22:90:b3:c0:eb:cc:ae:91:ae:bd:19:c2:
42:6b:4b:b1:94:0a:30:4b:67:93:a3:35:a4:41:ce:
e6:ad:d6:b3:2c:87:2a:e7:5c:0a:40:f0:16:de:62:
12:93:4c:b6:d4:c5:24:45:7d:52:ee:b5:89:27:21:
17:db:79:f6:5d:16:ce:c2:56:c9:e6:b2:76:73:53:
3e:0d:17:da:1a:35:a7:08:0d:e6:1d:0a:d9:63:fb:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:15:4C:D7:B2:A5:7E:AB:82:98:DD:32:23:23:A6:5A:13:6E:64:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:8e:47:57:a4:7f:02:f8:2c:35:5e:90:8b:f5:48:d8:22:ec:
23:a9:b3:5d:0f:34:17:6c:18:73:ec:42:86:87:fb:bf:54:b4:
59:27:af:69:b6:e3:43:63:c2:b6:cd:20:43:8b:1c:8e:66:d3:
8f:ad:06:ee:d1:f5:38:53:93:39:c4:ab:ad:99:49:17:1a:6f:
b7:a2:61:a6:e8:8f:9b:f7:4f:5d:9c:ad:b8:32:e6:c2:5f:ab:
0b:e9:42:86:95:c4:e5:90:a0:61:20:a1:ef:81:33:1f:10:ba:
14:64:e3:8b:e4:e2:8d:38:9c:54:06:a0:94:4b:9d:54:28:4d:
4a:6b:3f:b2:ad:76:d2:87:fb:c3:3a:8f:07:ca:89:ab:c8:7a:
5d:cc:8e:ec:6a:b7:e3:16:95:fd:1a:7d:1f:b0:74:01:24:10:
c1:bd:3c:89:bc:66:28:57:e1:95:20:fc:1e:9a:ea:29:7a:ea:
cf:2a:4f:7f:b4:46:af:3f:8c:e7:33:da:9a:11:4d:12:c0:84:
fb:af:6d:46:42:10:7f:5a:4e:59:d6:03:d4:ae:aa:9e:16:b6:
d5:d4:51:98:41:d0:9e:a7:da:b5:13:90:ec:f9:f6:bd:cd:90:
18:1e:c3:3f:d3:e6:57:61:fd:5b:26:63:20:fb:53:73:3e:df:
1f:f4:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:15:02 2025 by rpki-client