Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa
File: 6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa (raw, json)
Hash identifier: oZe2vYLO/tacAHqQqfYGIo0l4AGFVnvLbtJJluCw7Ow=
Subject key identifier: 01:75:B4:A4:38:33:8A:E5:BC:2C:0B:E1:1F:D0:56:2F:87:B9:E2:3C
Certificate issuer: /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
Certificate serial: 010D0C9F43285848DEA119EA45F4862E317F7280
Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 53429
IP address blocks: 199.180.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:19:ea:45:f4:86:2e:31:7f:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=1a633733-c939-41be-b1f5-1256ad13b8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:37:64:84:3b:3c:f8:c0:93:24:e6:c7:ff:
50:10:f7:46:bf:52:21:44:88:77:32:a2:55:7c:11:
88:78:16:e0:21:04:1b:ec:ae:b0:71:b1:7d:31:66:
c0:0a:a9:5a:e0:ec:07:fb:06:9d:3e:78:2c:f3:08:
aa:92:68:36:89:90:94:21:10:20:38:8a:5e:59:a4:
be:9d:23:64:67:09:5e:dd:2b:62:36:44:35:ee:ea:
f5:ba:90:5e:dd:81:aa:87:7a:6f:9b:b2:57:b9:dd:
c0:ca:fe:2b:98:07:f6:ca:34:eb:15:96:d1:1d:dc:
7f:63:73:d9:3e:ba:4d:06:2b:4a:45:f0:d7:c8:4a:
65:1a:cd:c3:9e:cd:f3:fe:25:d7:fa:de:ad:70:50:
fc:ee:fd:dd:9c:7b:21:d6:14:d5:30:7c:b9:cb:3c:
47:12:3a:b4:60:f8:4d:87:6a:13:66:a2:c0:f7:e1:
66:65:6b:8f:43:e7:15:9b:bc:6a:46:21:40:6b:f0:
9b:62:98:a8:b1:41:35:2b:c2:e3:70:16:cb:07:de:
c2:6d:c5:13:7a:75:b8:0d:52:50:f5:89:12:3d:26:
07:ce:ca:4d:3e:e2:1f:e8:f3:97:0d:b7:f9:39:db:
c0:be:51:d7:8b:e6:28:85:57:bc:fe:e2:68:1e:86:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:75:B4:A4:38:33:8A:E5:BC:2C:0B:E1:1F:D0:56:2F:87:B9:E2:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl
X509v3 Authority Key Identifier:
keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
sbgp-ipAddrBlock: critical
IPv4:
199.180.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:2f:50:6c:7c:8a:07:82:eb:38:e8:f5:c8:df:4b:20:7c:cd:
62:7f:d1:e2:d1:ae:30:e5:2b:39:d1:18:b3:45:fc:56:ba:46:
2b:84:3b:7e:4d:95:b5:5e:76:b6:4a:d1:aa:f2:a2:42:a6:cb:
eb:dd:29:90:ab:7d:7e:4c:10:6b:ff:9a:29:23:55:61:6b:29:
49:8a:7e:21:de:e8:e9:e8:95:9c:32:91:71:2f:6e:1e:ed:22:
dc:78:5f:f9:50:97:b8:3c:eb:8a:3c:a2:4a:26:3c:d8:1a:05:
31:6a:b8:bb:91:a7:c3:d1:42:87:f0:ac:0e:85:66:3f:4c:9e:
f1:ef:9c:44:1e:8d:5b:b5:54:f0:26:56:66:4b:70:97:5f:81:
1c:b7:08:fe:ec:2e:fa:d6:04:26:d3:33:6b:d6:9a:50:a4:de:
a3:d7:27:12:30:25:88:e7:c2:4d:90:46:3a:52:15:36:f0:14:
94:9a:4c:dd:38:f7:a2:ff:48:de:00:a7:ae:2d:fe:70:db:7d:
9b:48:29:51:e9:e2:e5:37:92:6e:ad:25:bb:2c:87:6b:d3:7e:
c2:ab:1f:69:5e:8a:bf:7d:c0:fd:e1:9e:47:3c:ae:5a:b4:f7:
65:bd:3b:20:f1:3b:87:15:0c:65:ca:65:9e:3e:41:26:46:3e:
d0:e5:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:40 2025 by rpki-client