Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa
File: aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa (raw, json)
Hash identifier: YmL/TLOR0bInKk82AGqW3nrQlWmb4uBFLWhYVBaQt8Y=
Subject key identifier: F6:78:D2:1B:CC:36:BD:69:C8:E9:6F:75:B6:EF:D8:03:27:A8:6C:BF
Certificate issuer: /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial: 010D0C9F432858493C0928B71D9580D3D8797380
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 52262
IP address blocks: 200.12.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:28:b7:1d:95:80:d3:d8:79:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=a91bfd76-efa0-462e-ad5c-14b4202186b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:68:20:0c:16:09:f0:4f:68:b7:09:e0:75:
0f:99:ea:42:e0:95:85:dd:17:e0:50:cd:85:8d:94:
a7:b2:20:ce:10:c8:b6:41:6f:a2:ea:bf:84:16:7c:
ad:cc:8a:f9:a1:9f:f2:8c:f6:d8:1a:e0:12:89:3d:
ce:69:35:f0:49:d3:b0:d3:c8:db:a4:73:f6:67:fa:
6b:1c:94:91:6e:88:53:46:48:6b:e2:83:46:8f:06:
10:52:77:59:e0:14:96:05:77:0c:ef:b3:30:1f:7f:
ac:8a:c5:30:09:22:b8:d8:cf:c9:c3:5a:ad:67:6a:
a4:ad:9c:4f:ed:9e:a6:95:a7:96:01:02:bf:02:6e:
dc:4d:34:54:49:b2:37:7c:18:8b:b6:1a:6a:85:7a:
8b:67:62:14:ad:9d:12:82:b6:32:21:3e:24:26:80:
3d:3a:82:ca:e6:1a:12:46:6c:fd:9f:11:8f:e5:fd:
77:7c:c7:32:45:fd:be:b0:82:8e:a7:a0:36:38:2c:
e7:ad:65:f9:e4:78:2d:45:cf:12:04:bf:77:12:f4:
39:c5:2d:c6:68:4e:58:96:60:d2:6c:4a:9c:a9:e8:
ae:43:d4:94:b7:12:6b:45:98:34:b5:27:bb:dc:d8:
d5:c8:96:ca:6e:35:8f:df:4e:f0:22:68:6f:52:1d:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:78:D2:1B:CC:36:BD:69:C8:E9:6F:75:B6:EF:D8:03:27:A8:6C:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
X509v3 Authority Key Identifier:
keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
sbgp-ipAddrBlock: critical
IPv4:
200.12.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:87:68:c6:2e:fb:dc:5d:91:9d:a8:1c:c3:5b:ab:14:06:36:
2d:2b:99:68:73:e4:3e:2d:49:e4:8a:52:51:e2:3d:19:6d:bc:
7f:32:39:22:71:cb:c4:7f:61:8a:75:10:59:c4:61:b0:9e:52:
07:de:67:77:c2:05:07:38:71:1c:69:73:94:8a:10:63:50:a1:
49:e2:29:86:64:5e:5f:42:79:33:fb:d4:a2:71:42:49:a7:0c:
9d:08:46:7e:18:de:dd:ad:3f:00:fb:a8:9f:ab:75:19:61:cb:
a6:f4:c1:d6:06:04:95:9f:47:7b:82:7a:e2:b0:36:5a:7b:56:
23:f1:b4:a4:d8:23:e5:4a:24:14:c6:57:56:95:71:89:a7:ba:
49:cd:bc:40:40:21:49:1a:ff:f3:4a:d4:c7:77:ea:f7:e9:33:
8b:71:6c:9b:88:b2:6c:27:91:f1:37:90:11:00:80:05:1b:74:
42:07:6b:0e:d4:d6:84:0c:53:9e:37:d6:cb:95:db:ba:18:29:
08:30:bc:8a:60:0d:37:38:5d:21:e0:4d:c1:b0:d4:ad:f7:88:
90:94:d3:b1:f0:18:25:05:a4:40:43:b4:57:11:a5:99:8f:01:
06:01:06:89:b4:ba:21:75:ca:30:c6:21:2c:e5:03:25:43:a4:
ac:ab:81:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:56 2025 by rpki-client