Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa
File: 6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa (raw, json)
Hash identifier: oSIA+BP+tf2vCll9PZfSzfMN4GcQeJteZihqg2im79s=
Subject key identifier: D5:1F:CC:C5:CF:E3:FE:8F:5F:9D:A3:67:52:F3:FD:79:AD:2C:FB:E2
Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial: 010D0C9F43285848BBBB821C8197D69D8183B180
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 63298
IP address blocks: 199.45.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:82:1c:81:97:d6:9d:81:83:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=b2fe3c55-0996-4f09-bd04-f8c1d02bfbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:ec:ea:d8:fa:53:1e:a0:48:f9:ec:0e:62:
a8:5e:14:ad:ad:d5:3f:5e:0d:90:1f:32:20:40:e3:
07:60:0f:67:19:8f:6d:b3:ec:53:ff:e9:6d:b9:e3:
9a:8f:0e:f0:38:52:88:a2:fd:f0:f7:e5:2f:8f:da:
74:36:54:3c:d0:00:c6:46:02:fa:58:ef:06:dc:39:
6b:d9:14:e2:86:94:28:67:cb:e9:79:98:09:39:35:
e0:de:d9:44:e5:d2:28:d7:19:3e:48:6e:39:b0:58:
e1:8f:60:e5:8c:47:46:05:79:e3:11:9d:e0:c0:d8:
9f:49:0b:06:4a:30:81:c2:1c:02:a0:a9:03:b1:46:
02:0d:8c:9f:0e:18:61:b3:0c:aa:48:f9:cf:f5:b3:
db:95:e9:4a:9e:7f:9a:c5:aa:24:88:54:5e:ee:c4:
8b:9b:d9:04:7b:16:6f:b0:ba:16:4d:27:2a:d2:37:
58:3f:da:f6:59:8a:f3:24:51:40:06:f4:54:e1:4e:
5a:cd:9f:7c:a3:17:b8:ca:02:eb:b6:e6:ed:7c:7f:
46:60:aa:6f:53:4a:68:a9:49:19:6a:91:45:f7:6a:
51:b2:96:49:b6:2e:0b:46:75:36:67:d4:e1:52:59:
ed:ce:f8:55:ed:55:43:2d:d6:06:15:90:9f:d4:ae:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:CC:C5:CF:E3:FE:8F:5F:9D:A3:67:52:F3:FD:79:AD:2C:FB:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
X509v3 Authority Key Identifier:
keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.45.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:84:b6:34:35:26:ef:90:af:41:01:a8:4e:25:9c:7e:09:e6:
31:07:68:2a:ea:a5:f5:06:d0:90:b8:6c:6a:8c:02:59:80:47:
60:4b:64:68:5a:da:c3:35:eb:f9:41:e6:df:3b:b1:cf:2a:05:
29:1c:89:bb:58:28:09:03:00:cb:9e:6b:9a:ea:ff:4e:ad:31:
f2:3b:f6:a4:33:01:88:45:37:0a:53:22:80:07:33:9b:3a:a1:
a1:fc:10:af:84:5c:83:c0:b3:17:65:cf:01:0f:ef:2f:13:79:
5e:a5:2a:2d:b3:90:6d:d2:ec:fd:89:29:65:89:3c:65:27:fe:
82:f1:72:ad:2c:9c:78:e7:60:42:58:f3:f7:4f:a5:7d:4b:d9:
8d:2a:fc:7d:0e:82:8d:32:c9:34:71:23:a9:10:6c:bf:dc:67:
99:e7:42:44:0d:da:52:3d:0a:e1:cc:b9:5e:34:c2:8e:57:ad:
ff:18:22:2a:d5:0f:65:c4:7c:dc:a3:5e:f8:f7:0a:5c:3e:ab:
ff:78:9b:49:53:1d:1d:cd:20:2a:43:4c:e8:e3:52:7b:05:c3:
48:aa:3d:2b:26:ff:06:7a:5c:e7:f0:66:53:25:81:94:a3:6a:
fe:9b:33:2b:76:63:0e:d4:fa:be:cd:00:c2:72:d1:d3:3f:31:
14:70:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:49 2025 by rpki-client