Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa
File: ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa (raw, json)
Hash identifier: 4TKueIs9O/6wNDRDacY46xxVEy8AddzbtfMtlFIMjMM=
Subject key identifier: BA:B6:9A:AB:D3:2D:EB:45:37:E5:D5:F7:DC:92:ED:F7:28:90:F6:1D
Certificate issuer: /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial: 010D0C9F4328584894A5E27F5F344F642CE98C00
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 14618
IP address blocks: 199.187.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e2:7f:5f:34:4f:64:2c:e9:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=7fc69288-a5ae-4028-87f9-0265f7c5a8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:0f:fc:5e:fe:7d:14:fc:8f:a2:bc:7f:51:
a9:85:e7:9d:d1:e8:0c:6b:ec:01:dc:a7:15:12:9d:
c6:e0:30:85:57:07:16:28:8a:5f:ec:65:fd:66:a6:
fb:a0:5b:d4:4f:48:f5:26:84:6d:4c:ab:d9:3b:1f:
71:16:1e:4e:13:75:6d:a9:3e:10:87:97:53:c2:54:
4e:28:a3:2e:90:b0:74:ff:7d:b7:a0:1c:2f:6e:52:
7b:57:27:da:69:b9:99:de:de:0b:f4:c0:0a:ee:3e:
74:30:c5:cd:13:6d:eb:20:cd:2f:a7:33:d9:fd:13:
96:80:3b:41:cd:94:ee:d0:18:64:1d:90:03:ea:b0:
66:01:d2:b1:b9:b1:b6:1b:d2:fd:6c:12:61:f7:e6:
19:f7:f9:35:33:b2:3f:8c:56:75:0d:93:f9:f5:09:
e9:4c:ed:2e:ec:2c:8d:3e:87:73:8f:bd:17:d1:13:
52:d4:a9:a7:06:b7:67:9a:d8:f9:40:9c:88:f1:36:
29:75:e6:0a:3e:79:76:bc:40:c3:22:a4:6b:e8:38:
a0:bb:a8:d9:7c:ce:04:8a:fc:01:fe:3d:24:9e:c5:
61:70:5b:15:5c:5b:01:ed:6c:33:da:fe:8d:d5:0d:
50:72:e1:52:5f:12:ce:90:44:5c:27:23:c0:2a:8d:
11:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:9A:AB:D3:2D:EB:45:37:E5:D5:F7:DC:92:ED:F7:28:90:F6:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae046f9d-5e0f-39f0-aa05-18c0b2dfaf2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
X509v3 Authority Key Identifier:
keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:18:7f:f6:56:7c:3e:9d:5e:dc:c2:92:38:9e:72:e0:25:39:
53:ed:5a:27:5f:34:7b:28:4a:f5:ff:79:ca:cb:e5:78:8f:2b:
83:09:3f:46:49:40:35:9a:34:cd:74:99:76:63:c2:41:55:4d:
02:1e:5c:29:03:52:57:5f:a5:cb:76:44:60:19:36:c2:45:56:
ac:f4:ad:93:78:8f:93:83:d5:17:1b:34:f9:69:48:0c:e7:89:
20:32:80:bc:f8:56:54:97:1b:ca:17:b7:f5:3c:8f:3e:30:1e:
de:bf:f3:67:30:fb:10:ac:69:c5:b1:51:50:46:87:88:1a:56:
9f:24:fc:b1:84:b5:c1:43:37:7d:55:a6:35:41:85:b1:ee:42:
b6:da:3a:4c:27:f1:af:10:3a:10:a3:35:54:2b:e0:ae:22:d7:
d0:51:f3:f7:f2:85:89:e2:d0:48:55:77:e2:f0:31:d2:ff:79:
5e:46:31:ea:27:1d:61:ae:4f:64:ba:71:dd:4b:82:21:d2:04:
85:ce:37:e1:e8:24:58:64:9f:2f:e7:28:8a:98:bc:f4:cd:46:
4c:0d:7f:e8:d3:d9:bb:89:a9:72:de:33:db:df:c5:57:8c:08:
be:fa:eb:79:0b:5c:95:23:46:68:21:c6:fc:80:d1:8b:29:e1:
de:f1:14:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:35:59 2025 by rpki-client