Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/64bd0b4b-f3cf-3522-9aff-024e620d8a96.roa
File: 64bd0b4b-f3cf-3522-9aff-024e620d8a96.roa (raw, json)
Hash identifier: NSMHrczo2m/zoghLqZgMWXYU9v9dTt/NmeSQmQeTDqY=
Subject key identifier: A2:8E:9F:2E:08:61:01:D9:DA:7B:5B:B4:84:4F:62:9C:5E:F2:00:F8
Certificate issuer: /CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
Certificate serial: 010D0C9F432858494E2EACD532AB67EC9019CF00
Authority key identifier: B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/64bd0b4b-f3cf-3522-9aff-024e620d8a96.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 14618
IP address blocks: 199.43.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:ac:d5:32:ab:67:ec:90:19:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=e6b1db7e-f9a5-49f1-a0ac-f89a551f8f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:f3:08:a7:62:61:8c:2c:e9:73:5c:fc:70:
e7:9b:e6:c8:b4:f6:6c:c6:25:90:bc:5b:85:21:7c:
19:ea:ad:b7:5f:57:82:9a:51:25:b7:91:3f:af:e4:
df:49:23:bf:86:b7:d2:2c:9e:e5:52:fa:7c:c9:79:
27:8b:22:1e:4f:d2:82:a4:42:0b:d6:28:2f:2c:98:
98:3f:cd:14:8c:67:66:a1:0d:96:99:6f:ea:f2:b2:
88:dd:4c:70:14:93:b5:5c:8c:ed:0e:38:02:60:3c:
ca:6a:77:e0:7b:a0:d3:18:da:eb:3b:2b:65:67:ac:
d4:a7:4c:13:e3:5d:85:90:c9:3f:62:59:71:b3:41:
0f:02:51:f9:81:87:0b:83:07:fb:f4:1a:be:d6:1e:
43:8f:92:0c:5d:79:64:70:cc:3a:b1:84:3e:f9:4c:
c6:11:70:98:d2:2f:71:fe:88:2e:32:fa:fd:b4:62:
7c:d8:7e:58:dd:fb:5b:e8:7f:49:bc:74:2f:cc:fc:
b6:8a:71:f3:ba:5c:ee:08:76:30:72:96:0b:bd:f1:
83:ab:0d:d4:7d:1c:74:86:7c:0d:60:9a:29:b6:bb:
cf:ad:dc:b8:90:3b:d7:55:3d:78:ab:76:24:00:62:
a5:7b:55:ea:57:5e:48:be:ae:16:ae:27:4d:b7:df:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8E:9F:2E:08:61:01:D9:DA:7B:5B:B4:84:4F:62:9C:5E:F2:00:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/64bd0b4b-f3cf-3522-9aff-024e620d8a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl
X509v3 Authority Key Identifier:
keyid:B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
sbgp-ipAddrBlock: critical
IPv4:
199.43.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:be:14:57:79:c1:c4:92:72:ba:76:20:6b:e1:9b:cd:67:af:
b2:3e:9a:a0:94:ef:7f:92:d1:44:67:b0:db:f9:5b:18:35:f8:
8c:6e:4b:47:75:0f:02:1f:43:cd:e6:a4:6d:f0:2d:f2:2a:b1:
36:3c:ed:fe:f4:49:bd:3a:3a:87:60:87:40:22:80:bd:1e:fd:
34:88:db:d9:31:32:6e:5c:60:6c:28:11:53:6c:da:17:9c:bd:
6a:ab:ba:61:24:15:ea:2e:22:b5:5c:b8:f1:f3:d0:11:59:f3:
1a:e8:2d:a6:9c:c5:5a:ee:33:cb:20:43:39:44:2f:1c:6d:f3:
04:dc:ee:e3:8d:6e:d9:73:13:c6:12:b1:d0:93:c5:79:21:b6:
c7:2c:45:57:96:50:5e:73:ab:3d:a1:7f:73:84:bf:61:39:19:
38:8b:06:50:8a:f4:5c:b2:bc:e7:8d:43:45:d7:02:c3:cd:8b:
73:d7:73:71:a3:c4:72:f1:02:13:01:5a:85:bc:24:5e:ae:e5:
7b:4d:c9:68:74:43:00:6c:fd:5c:6b:21:05:b9:88:28:7e:2b:
93:03:ab:01:4d:96:cc:db:50:7d:59:73:a6:39:c7:3a:00:12:
f5:7f:10:d0:87:cd:c9:13:3a:0d:11:bc:e9:4a:25:a2:8c:5f:
ed:1f:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:10 2025 by rpki-client