Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f29289cc-2f8f-324a-b8f5-e8e75e5baed7.roa
File: f29289cc-2f8f-324a-b8f5-e8e75e5baed7.roa (raw, json)
Hash identifier: 3RDKli1mdiimq7cf6ezbiN5kL8BAvO0W/iqNE8njfMo=
Subject key identifier: D4:E6:6D:92:F0:55:6A:F0:87:FD:75:CE:9B:A1:96:E2:28:9E:2B:8F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996490C0EABCE1BC13E89C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f29289cc-2f8f-324a-b8f5-e8e75e5baed7.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397219
IP address blocks: 199.7.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:49:0c:0e:ab:ce:1b:c1:3e:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=cad2af7a-5861-44ee-b677-fdb7f1ef09c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:3e:ee:5b:a0:35:98:e0:db:6d:f4:12:f6:
c4:a5:5c:f7:f3:f0:0f:ba:a0:f9:d8:a9:30:93:6c:
13:c5:e3:a4:c2:bf:01:de:b0:53:10:21:ea:01:fd:
95:91:1b:ca:43:86:70:1d:0e:b5:da:a2:d4:0f:e9:
21:ce:a2:45:15:e9:70:20:f7:5a:15:0e:0c:d6:f1:
cc:9d:53:9d:f7:2f:14:78:8d:14:33:7c:d9:a9:17:
78:38:52:92:b7:78:5c:39:6d:2b:c6:62:0b:62:23:
f5:1f:b1:d1:1d:0c:b8:29:47:b7:68:d2:e6:9b:3a:
5a:42:fc:7a:52:61:01:68:7e:9e:04:e2:e5:09:7d:
07:4a:54:4b:b5:ce:5c:e5:55:d3:74:66:fe:5b:7c:
e6:c1:47:63:ab:08:7f:21:41:df:a6:ac:e6:b2:a9:
2b:39:dc:d8:2c:96:cb:f7:a3:b4:4e:1d:03:86:47:
14:ab:ea:25:73:52:c4:9f:e3:7f:73:a9:21:9f:05:
8e:69:d1:82:31:de:51:d5:b7:62:1f:21:bb:65:b2:
7e:e6:5a:d1:90:b0:58:ff:7a:e5:48:ac:86:8a:10:
d3:58:67:e4:76:b5:64:b3:d8:a0:74:a4:ed:56:ce:
95:64:91:87:c8:53:27:ea:48:44:93:df:c5:36:3d:
cb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E6:6D:92:F0:55:6A:F0:87:FD:75:CE:9B:A1:96:E2:28:9E:2B:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f29289cc-2f8f-324a-b8f5-e8e75e5baed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:79:cd:5c:39:29:81:ba:99:31:fa:d7:70:f1:c4:80:54:1d:
e8:f0:5f:8f:1a:44:36:bf:45:51:ee:30:95:e1:b6:c2:10:3a:
e6:c0:53:04:ee:0c:f9:60:86:df:c4:ac:ca:86:bd:44:16:2f:
f1:38:85:35:e3:3e:f4:18:aa:af:da:73:db:eb:d8:b8:2a:48:
89:a6:3f:23:66:a2:03:2a:ef:40:83:0e:5e:16:24:df:3e:55:
44:5f:bf:48:31:9c:69:8d:59:84:bb:99:f1:f0:79:08:44:93:
ba:87:95:42:93:8d:f9:fc:64:b0:59:c2:a4:c1:15:a8:db:9a:
ad:3c:54:24:19:33:2f:14:43:b7:4b:0c:7f:9e:9c:9a:6c:2b:
ef:6b:89:0d:92:f5:83:ac:a9:1c:92:50:cf:0e:b7:fe:4f:87:
ed:e7:e7:78:a0:29:72:2a:89:dd:29:8c:a1:c9:61:71:1d:60:
d1:2f:be:07:8f:4e:cb:54:1d:1c:a5:89:40:68:19:a9:f4:b6:
4a:06:d9:fc:4e:fe:d9:0a:13:e1:3c:45:c7:b7:ce:70:98:0c:
ac:71:58:bf:cc:33:29:76:62:84:e9:ee:35:44:17:bb:5a:dd:
56:ff:66:62:1b:dc:10:ba:cf:01:ff:37:9d:e6:af:ab:85:68:
12:24:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:45:55 2025 by rpki-client