Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa
File: 0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (raw, json)
Hash identifier: UmO8gX7hBehEB/MRcVvYxjOGL4iBMYMPmDka5vHYUgo=
Subject key identifier: 8A:8B:B9:EE:20:CE:76:C8:6C:98:CE:AC:20:A2:05:DA:23:62:B3:EF
Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317
Certificate serial: 010D0C9F43285848EF6133A48837A48EDF2C9AA2
Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 27229
IP address blocks: 199.241.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:33:a4:88:37:a4:8e:df:2c:9a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=6d352c7b-450c-4348-a284-412a7f0bd53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:48:77:f2:63:b2:5e:31:4b:88:9b:e3:ca:3e:
a1:51:fc:e1:07:0d:86:14:c9:7a:76:9f:dc:f8:b8:
c6:bb:a7:bf:d8:af:38:d8:ef:a5:86:6d:d8:86:38:
63:fd:11:61:5b:0d:10:b7:fe:43:6e:2a:f6:87:b8:
3b:b4:74:53:cc:b2:38:f5:5b:b0:86:91:77:2a:05:
9c:34:b5:57:94:a5:d9:70:09:c2:16:74:a6:e6:a1:
51:5c:15:ea:2c:3e:db:41:77:e4:5f:c8:42:7d:0c:
95:0c:48:80:5a:3b:40:64:ba:88:c3:8f:18:45:70:
b4:d9:de:a0:1e:c8:43:24:08:96:1b:99:2e:2b:23:
42:87:9f:89:31:3a:87:05:6d:0b:41:15:fb:16:a3:
30:58:6d:10:e9:5f:60:d5:6d:76:d4:f9:c2:dd:93:
38:cf:1a:54:6d:d9:92:29:ca:94:30:20:ff:33:12:
cc:f4:c5:e2:a1:39:02:3f:93:a5:08:d9:9c:4a:4c:
45:56:c0:01:3c:d8:fe:4f:12:46:35:54:67:c6:12:
f0:62:c7:6b:bb:67:70:c4:db:e5:57:0c:0c:42:85:
db:72:54:97:a0:26:ff:04:26:86:5b:83:96:da:55:
63:84:2b:f0:a3:62:83:04:a5:d2:88:89:b6:fe:a2:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8B:B9:EE:20:CE:76:C8:6C:98:CE:AC:20:A2:05:DA:23:62:B3:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl
X509v3 Authority Key Identifier:
keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer
sbgp-ipAddrBlock: critical
IPv4:
199.241.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:65:42:73:95:cb:65:9e:7f:48:a4:af:cb:09:89:07:02:59:
96:ba:1a:cf:8f:87:83:88:0b:bc:40:01:38:93:e0:a2:c4:49:
37:37:51:75:19:2d:b9:9c:bd:4e:74:4d:0a:7c:4b:b0:f1:cb:
ce:6b:ec:4a:89:78:33:af:5b:32:6c:37:cf:96:f8:de:ee:f8:
60:45:59:42:43:52:97:e9:ff:41:87:ac:48:71:eb:eb:12:ec:
ff:2a:da:eb:14:23:b2:d4:fe:a6:1e:8c:df:62:5a:6a:30:46:
1e:5d:54:d6:3e:4a:31:f9:96:c8:51:8b:57:7f:25:82:90:62:
84:f3:04:0a:2d:ad:cd:0d:34:a7:1e:28:2d:87:d1:24:c6:06:
ba:00:ac:f8:e9:09:4f:23:f4:49:c4:ad:98:41:22:ac:6b:32:
65:3e:2a:3e:d5:63:d1:0a:50:a4:d0:e5:8d:bc:54:7b:35:8a:
b5:92:8b:92:e4:33:28:cc:55:60:81:fd:bb:68:31:27:1c:8c:
c1:48:4c:5c:cf:d9:ba:ea:5a:9f:a8:cd:98:da:ff:60:42:c6:
32:b1:38:86:3d:90:c9:04:11:3c:b9:6e:89:cb:7b:82:3a:cf:
0b:59:53:a5:72:43:8a:2e:70:32:80:cc:32:1b:16:ab:d2:d5:
5f:61:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:45:18 2025 by rpki-client