Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86ae9906-6182-3f5f-b7b0-38347082a9aa.roa
File: 86ae9906-6182-3f5f-b7b0-38347082a9aa.roa (raw, json)
Hash identifier: rDAH8RjRmKf+DLNu0Ttu3KvQmYb5j/TURI9Mr3Begzg=
Subject key identifier: 1F:72:D5:34:4E:B4:92:04:6B:FF:6F:F8:E5:54:B9:46:D2:0F:31:30
Certificate issuer: /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
Certificate serial: 010D0C9F4328584957F3FE0FF270F48140DA4680
Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86ae9906-6182-3f5f-b7b0-38347082a9aa.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 54138
IP address blocks: 199.33.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:fe:0f:f2:70:f4:81:40:da:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=fe850704-39de-47df-92bd-534890be9b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:da:9d:f8:34:9f:30:66:d5:bb:a4:96:7a:
84:22:62:a5:2c:c5:db:b6:3d:d2:24:3c:96:41:67:
18:d3:37:b1:fc:7b:e2:bf:f7:ba:e7:2d:f4:6d:a7:
90:c2:fd:03:07:8d:db:25:1a:2d:f9:59:c8:0e:59:
58:83:dd:21:33:6c:74:6b:ba:af:59:b1:f6:a4:43:
ca:2f:9e:2a:53:6e:e2:4d:53:36:a8:2c:2d:9b:e0:
e5:99:92:8f:f4:25:a6:da:3d:cc:62:b7:18:9a:1c:
9c:82:50:3c:ad:21:d1:3f:fd:ba:3a:2c:b5:56:1b:
ef:84:1b:07:a9:58:ad:c6:54:c2:f1:57:2a:66:46:
0d:c5:25:ff:88:48:c4:b3:14:9c:7d:03:5b:35:cc:
b3:50:2a:36:7c:5e:d1:10:63:ff:93:e2:bc:f8:7b:
f9:a7:f6:4f:4f:86:7c:af:79:b9:f4:cd:1c:9a:f2:
b1:ff:2b:1f:6a:3e:99:99:fa:68:d1:aa:a2:c7:35:
66:42:47:74:ee:1b:e1:d5:12:29:ba:b2:70:ab:88:
94:85:80:86:58:94:77:c9:7a:62:b9:66:89:2d:7a:
61:fd:51:79:f9:4d:f6:77:de:5e:6f:63:3e:60:e2:
11:80:cb:3e:f7:13:1d:27:13:de:78:aa:eb:fa:68:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:72:D5:34:4E:B4:92:04:6B:FF:6F:F8:E5:54:B9:46:D2:0F:31:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86ae9906-6182-3f5f-b7b0-38347082a9aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl
X509v3 Authority Key Identifier:
keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.33.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:c5:94:02:ee:d0:05:89:2c:11:64:c3:ac:b8:03:25:6c:30:
b7:74:68:93:c0:1c:96:6d:ff:08:97:be:28:f5:81:2d:f1:4d:
ba:3b:a2:d4:a0:ee:16:db:89:a2:ee:1e:c0:2f:f7:bb:8e:1a:
9f:6c:cd:a9:17:62:49:7c:85:67:60:8f:f3:c0:4a:b9:b8:3a:
8e:e2:fc:e1:af:5d:50:a6:cd:dc:5f:7d:13:73:ff:6f:e6:37:
fd:45:82:6d:74:11:50:43:0c:76:bd:b3:7d:26:66:ab:cd:ae:
27:7b:53:31:be:79:78:09:53:1b:89:89:08:08:7a:c1:48:07:
25:ed:ef:39:5c:2f:84:3d:f5:ef:af:fa:37:ba:84:a4:95:15:
bd:6b:af:e6:89:4d:9d:0c:5b:c8:e3:be:c1:cb:ae:f4:b5:19:
0c:39:a6:78:1d:df:49:8f:29:a4:63:33:20:f4:51:3e:8a:f5:
1b:0a:bf:71:c2:b9:13:63:43:e7:17:9d:54:d4:ea:4c:ef:f9:
f5:e5:4f:2a:b1:7c:72:28:b2:0d:a0:d8:2e:c6:d6:21:c7:c1:
25:eb:3f:87:25:0e:9a:51:c6:86:06:36:fd:f8:6d:32:d9:ad:
39:ea:64:51:3e:97:a4:c7:5a:4e:74:c7:12:96:9b:9f:55:aa:
8e:6e:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:32 2025 by rpki-client