Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446/a344504a-5432-324c-b92a-7dce49f8b28b.roa
File: a344504a-5432-324c-b92a-7dce49f8b28b.roa (raw, json)
Hash identifier: 9RF7s6TattTFc2IkEeaufb+SMu/xFxQ1UmpUGz9F61Q=
Subject key identifier: ED:B7:A6:33:D2:39:CD:68:92:2A:CF:5F:35:ED:0C:08:D7:74:E4:64
Certificate issuer: /CN=752d413c-d382-4874-b63b-a253c7aa7446
Certificate serial: 010D0C9F432858488DAB47D1C71A832F22D92310
Authority key identifier: 33:98:EF:BE:87:5A:24:D5:3D:62:9C:D7:82:6E:7B:22:6D:B0:34:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446/a344504a-5432-324c-b92a-7dce49f8b28b.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 14618
IP address blocks: 199.115.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:47:d1:c7:1a:83:2f:22:d9:23:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752d413c-d382-4874-b63b-a253c7aa7446
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=0e24db60-41a9-4090-859a-76997e5012da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a7:22:e8:17:de:0a:c7:af:3e:7e:bd:23:ba:
f7:55:96:01:a9:76:7d:20:a9:d7:7c:81:13:98:f1:
e3:c6:ec:42:a4:47:41:b2:22:95:8e:66:38:dc:75:
b2:bb:78:92:41:4e:3b:b9:ab:9c:20:a3:ee:20:66:
3a:02:72:71:97:19:cc:25:c5:81:c9:a2:5e:13:4d:
d7:7b:24:2a:73:3a:57:a2:e9:c5:21:98:15:7a:1e:
73:75:87:6e:b3:25:2a:68:e9:07:64:cc:7e:35:03:
cd:c7:80:6f:a2:d3:d4:db:27:21:fa:1a:4c:b7:27:
0a:ac:17:4a:e4:d6:19:06:59:49:9c:c9:46:1c:ce:
04:5d:c0:90:26:f4:6f:22:19:74:27:38:80:8a:bb:
d1:41:11:0c:21:b0:88:23:bc:45:91:d2:47:ab:92:
86:70:26:77:9f:de:25:57:19:bb:e5:23:26:a7:ba:
50:d4:fc:79:18:63:23:eb:0a:bf:d4:b9:f0:6c:96:
0e:38:c1:f0:4c:80:37:3c:68:8f:c9:74:3a:9f:41:
3d:cf:e0:da:2d:7b:d7:3c:5e:8d:7f:e8:70:00:99:
36:b8:57:41:92:db:a7:57:71:e1:c6:b8:0a:95:87:
bc:02:4f:40:d4:0f:6e:c5:5a:de:14:f9:ad:49:14:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B7:A6:33:D2:39:CD:68:92:2A:CF:5F:35:ED:0C:08:D7:74:E4:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446/a344504a-5432-324c-b92a-7dce49f8b28b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446/752d413c-d382-4874-b63b-a253c7aa7446.crl
X509v3 Authority Key Identifier:
keyid:33:98:EF:BE:87:5A:24:D5:3D:62:9C:D7:82:6E:7B:22:6D:B0:34:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/752d413c-d382-4874-b63b-a253c7aa7446.cer
sbgp-ipAddrBlock: critical
IPv4:
199.115.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ef:26:87:68:31:09:e2:3e:5a:7d:a9:32:e5:89:ee:ce:d0:
0d:ea:7d:f1:cc:78:92:59:81:5f:6a:a2:96:54:38:84:c5:25:
63:55:41:b6:3b:8b:08:26:1c:f8:ac:16:4c:d5:aa:38:71:c1:
64:5a:59:ed:6d:45:a6:4d:90:d8:65:59:d2:a2:c7:38:57:3b:
75:1e:cf:d3:69:e4:86:bb:0b:4d:c4:1a:39:8c:08:75:11:83:
20:db:2b:c9:72:ed:8e:e3:56:8f:a3:d6:94:3c:4e:ed:bc:a3:
de:8d:c1:2e:55:c6:7a:25:17:74:5d:da:b1:fe:4c:9e:58:8e:
00:52:fd:b0:ad:e5:d4:fa:04:a6:f1:9b:0d:20:b3:3a:12:72:
72:42:eb:6c:52:9c:a0:09:2e:62:ed:b4:ca:56:a8:4d:71:55:
36:de:b4:28:07:6c:99:73:99:ba:cf:14:b3:b7:96:94:e7:30:
9b:5b:f7:d6:e4:dc:2b:61:5c:21:34:cd:9b:ee:11:2f:5c:6c:
01:ca:cd:36:7b:cf:1d:71:7b:33:cb:85:1a:02:b3:d3:24:93:
45:95:f3:8c:72:0b:57:f9:49:f8:41:b6:e7:86:4f:87:18:e1:
8f:73:cf:17:66:b0:bc:fe:40:98:b0:45:33:be:7f:a7:0e:26:
8a:b9:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:54 2025 by rpki-client