Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa
File: 50ea20c8-093a-3fe4-83f4-d17728e47031.roa (raw, json)
Hash identifier: 3q926t82GDe08WVnj2SMwRo0dX66nSwhm0626d+pYD4=
Subject key identifier: E0:22:A8:C2:63:F5:C0:53:59:EE:2D:FA:7D:2E:12:2C:F7:DF:E3:5C
Certificate issuer: /CN=7ef50a44-841d-4e54-ae13-fdc6f6c7440e
Certificate serial: 010D0C9F43285849350EAB2F8AA79E74C97D9180
Authority key identifier: 4D:D8:93:C6:7F:98:4F:8C:8C:FF:4F:AE:AD:DB:76:3A:AE:C5:E6:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 395254
IP address blocks: 199.9.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ab:2f:8a:a7:9e:74:c9:7d:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef50a44-841d-4e54-ae13-fdc6f6c7440e
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=f7d1c277-41fb-4e25-a698-ec39310f4c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:44:ba:c8:14:04:cb:ed:49:7f:79:f6:35:
08:83:0d:68:3f:24:ce:d8:55:a8:95:18:b0:42:3b:
d2:ae:3d:99:70:9f:90:ff:dd:d4:98:77:9c:15:f4:
f5:1a:5a:c4:b4:e8:65:1b:23:7d:7e:be:1e:3a:45:
23:a9:50:0b:2b:ce:06:88:39:5b:c7:6f:ce:11:e5:
ad:da:5c:0c:08:0e:32:f9:64:81:37:07:3a:02:af:
c0:f9:38:9e:48:cd:43:ba:41:f2:f6:ff:7b:03:f5:
6d:fb:0b:bb:79:41:58:e9:78:51:77:de:c1:71:95:
e8:bc:ee:24:d9:fa:d6:61:81:ea:2c:6e:0b:d7:13:
4c:08:98:1c:9d:2e:78:f0:95:23:2a:b8:e2:c6:e2:
a8:81:dd:de:ea:d0:26:2f:be:7e:1d:eb:36:e8:6b:
fb:48:59:c0:43:f3:0f:d4:40:80:95:46:8b:24:0b:
f0:b7:db:14:af:4a:0d:3d:9d:fe:23:f5:9f:c1:d9:
c2:10:15:2f:ca:e7:95:fc:8e:2b:37:2c:f4:31:d5:
bd:c2:36:82:35:3c:ef:d0:6e:7c:16:b3:8a:6e:e7:
05:93:0e:23:5e:3f:af:66:ca:d3:1f:f4:53:6a:de:
1f:9c:ef:e7:e2:ed:da:1c:22:92:7b:54:1c:7f:df:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:22:A8:C2:63:F5:C0:53:59:EE:2D:FA:7D:2E:12:2C:F7:DF:E3:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.crl
X509v3 Authority Key Identifier:
keyid:4D:D8:93:C6:7F:98:4F:8C:8C:FF:4F:AE:AD:DB:76:3A:AE:C5:E6:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.9.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:dc:3d:a8:2b:c0:a9:55:4e:80:7f:87:64:98:aa:a5:23:54:
3b:b4:ca:01:fd:ee:39:6d:a1:42:1e:74:b8:a1:3d:9d:f3:9f:
a8:0c:fe:7b:5b:dc:90:a1:ee:e6:cd:99:a1:b5:e9:93:ab:54:
93:8e:57:81:60:fb:00:c3:7b:ae:c6:4c:1a:fa:92:19:c8:80:
fa:ba:68:2b:fa:20:4f:78:2b:1b:ea:07:b1:65:c9:eb:f1:a1:
35:0a:ff:8b:08:47:80:96:b0:12:63:6c:6c:ab:4e:9e:04:ae:
97:30:59:9e:46:9e:c7:46:15:ab:03:87:50:a2:11:ca:42:00:
ab:b9:bb:ca:03:bc:32:45:93:a5:70:ef:43:35:a0:c9:d7:47:
32:db:9f:53:e7:05:00:44:ac:03:93:70:d9:70:de:5f:4a:46:
48:85:73:27:21:94:78:d2:78:54:66:03:a8:11:25:1f:10:25:
b5:06:e7:0c:49:a8:67:41:0b:84:a0:52:b3:c6:e8:c1:d2:c4:
e3:29:b5:d7:35:ec:49:2f:1e:b5:8e:13:bf:07:97:d7:79:c5:
76:06:bd:12:56:3e:25:83:a5:cf:52:cc:e8:d1:27:2f:bb:fd:
fe:41:b4:9c:2d:5e:92:e7:11:0d:da:9c:eb:65:66:45:2d:b8:
ee:d3:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:06:18 2025 by rpki-client