Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa
File: f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa (raw, json)
Hash identifier: XweWsSThA7+4KZfX9uD/Jv2mYJt/cpyPvWhC5vORpRo=
Subject key identifier: 85:8C:70:43:A7:ED:5E:2B:49:A2:1D:AE:8C:F3:57:B2:B5:1F:0A:67
Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial: 010D0C9F43285849446938FB246AFE8869F90080
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 12129
IP address blocks: 199.167.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:38:fb:24:6a:fe:88:69:f9:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=9b37dad4-a71f-42ae-87eb-505a6c2b33ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:8b:f3:99:72:24:af:f3:81:c9:9c:a5:56:
4a:7e:88:80:f7:37:b8:ea:61:af:45:9e:59:6c:70:
44:62:44:c6:7c:90:c6:4e:cd:ae:71:de:3f:ce:64:
0f:fb:e7:82:26:79:be:fb:71:c8:46:06:d9:57:fd:
83:80:95:fa:eb:bf:42:9f:f1:4d:37:cc:32:27:c3:
8c:87:45:65:64:13:55:67:2d:ca:c6:fd:ca:63:c5:
cf:92:a4:11:0e:74:4d:d1:7f:e5:71:ba:85:93:00:
11:8d:7e:8e:46:b8:f1:e9:de:5c:c8:20:e4:f4:7c:
fd:ac:da:a8:30:43:c9:ac:73:ef:60:29:90:61:70:
e7:9d:ed:65:0d:6f:90:9c:76:13:b0:4b:db:3e:61:
7b:49:99:fe:42:d9:12:ba:19:f4:0d:ab:51:8c:89:
fb:9f:d7:81:2f:67:89:97:ef:e4:40:99:3e:98:d7:
c1:43:ca:00:0a:13:65:1b:df:be:df:df:b0:b8:fa:
41:91:b2:f7:22:3a:06:a4:c0:c7:ff:14:3b:36:c8:
d8:d5:09:82:55:bb:6b:9d:6e:db:2e:f2:8b:07:06:
e2:b7:0b:d4:ee:ca:03:28:fc:91:86:8a:ad:76:f3:
be:fc:a4:b4:cb:65:d2:28:2e:45:3c:1a:d5:dd:bf:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:70:43:A7:ED:5E:2B:49:A2:1D:AE:8C:F3:57:B2:B5:1F:0A:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
X509v3 Authority Key Identifier:
keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:68:dc:2e:69:3a:bf:62:e2:28:87:bf:a5:be:a7:4a:9f:d3:
16:6a:9a:ea:f7:23:cc:77:a7:1f:fa:c1:7f:c6:c3:63:b4:bc:
d3:d2:ff:68:7e:2c:39:0a:ba:b6:1f:97:9f:cf:93:2f:bc:8d:
f1:dd:ff:9d:3e:3d:78:bb:b1:a5:f6:45:40:a6:64:2f:aa:15:
ea:aa:c9:df:37:18:98:a6:4d:83:a3:82:69:6b:26:27:85:0f:
97:e1:60:cc:79:a1:62:7e:06:96:7a:64:bd:7c:0d:8d:65:fb:
6e:83:d2:76:b3:41:80:c9:a7:1a:7e:3f:5e:6e:31:cf:84:ee:
90:72:bd:78:16:65:ec:b7:4b:c4:b3:9a:d9:f4:c8:8a:8b:fa:
5e:8e:d4:cc:cf:34:2e:fe:f5:d6:90:30:09:1c:4b:f9:d2:2c:
c2:c5:5b:23:61:db:9e:7d:b3:e2:5f:a2:53:e4:0b:bd:97:47:
5c:30:e5:20:08:1c:f1:7b:60:95:94:c8:5a:39:92:ac:a5:5b:
79:29:64:f4:9c:5a:34:e2:19:ff:ce:d7:ab:d3:64:46:8d:a3:
84:e4:32:ef:82:ed:34:72:cd:09:d4:65:99:91:a8:2b:e3:6a:
4d:0f:bf:6f:dc:b1:f7:33:f7:87:97:8f:ad:1a:42:a0:1f:8c:
dd:ec:85:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:46 2025 by rpki-client