Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/da483ff8-201b-37f3-8cae-64348e943e5d.roa
File: da483ff8-201b-37f3-8cae-64348e943e5d.roa (raw, json)
Hash identifier: 5N8GnO27KvlTUCp5lapAlxQHBdvzREgkNAwE9rU1VC0=
Subject key identifier: B1:0B:E2:E6:E1:60:EE:62:0C:0D:C3:62:64:40:EB:58:26:8F:26:3B
Certificate issuer: /CN=6e005a51-3e55-4f51-b393-eb9918255f3f
Certificate serial: 010D0C9F43285848AF2B84B8A817807E67924B90
Authority key identifier: 7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/da483ff8-201b-37f3-8cae-64348e943e5d.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 400817
IP address blocks: 199.58.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:84:b8:a8:17:80:7e:67:92:4b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e005a51-3e55-4f51-b393-eb9918255f3f
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=f22204f1-f8dc-4626-8eb8-a90f214dd68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:07:52:05:18:e7:14:f8:d5:96:e4:bd:2b:
d5:5e:79:8e:b2:57:f9:fc:db:49:59:f0:e7:4d:b6:
0b:25:16:1f:78:3c:15:2b:5c:ff:ba:0f:d7:9d:31:
5c:fa:44:1e:9f:f9:dc:ce:41:12:06:1b:6d:12:9a:
cd:0f:da:04:5f:f9:ac:e6:b7:01:57:22:74:71:4c:
f3:4b:04:c7:4d:fe:97:09:b5:4b:23:af:6f:06:c5:
6f:9b:0c:59:72:96:51:5f:b3:7b:55:68:11:94:4b:
66:1a:db:a5:5d:cf:d6:74:0b:d3:d1:0c:0d:e3:6c:
61:f9:e0:b2:de:fd:1f:15:89:41:fd:6a:63:41:d0:
9c:00:cd:13:36:f7:b2:31:ce:bf:d8:20:cf:ff:92:
81:35:8a:f8:f3:60:03:67:d7:02:8c:3d:53:1a:ee:
a8:7c:4f:9a:5c:70:fc:74:31:ce:65:57:f9:0e:4d:
a1:d7:d9:71:8c:df:11:9d:7b:47:5e:e1:05:4b:c1:
a7:77:b6:ce:04:f5:38:6f:0f:89:70:3b:9b:73:98:
8e:1a:18:26:0b:aa:71:78:87:be:bc:ff:f8:27:4e:
a3:0b:eb:f5:be:60:ce:1c:84:a2:8a:e1:26:b3:88:
17:5b:8e:0b:19:26:3a:16:2d:41:2c:9f:20:8e:be:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0B:E2:E6:E1:60:EE:62:0C:0D:C3:62:64:40:EB:58:26:8F:26:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/da483ff8-201b-37f3-8cae-64348e943e5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl
X509v3 Authority Key Identifier:
keyid:7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:db:a6:77:ec:5f:39:95:18:d7:41:69:48:4a:7f:7b:93:d2:
64:26:10:a7:72:a2:1f:0e:92:f9:ca:99:df:08:ad:e1:f4:6d:
09:0a:b6:c6:bf:02:0a:96:05:65:9a:a4:1f:0a:3a:09:e4:c8:
55:4d:10:21:a3:b3:9d:08:91:41:50:cb:20:d7:25:16:05:52:
8a:f2:ce:48:92:8c:89:d8:b6:85:4e:1e:2e:22:b8:27:7b:f2:
7c:93:94:8c:0e:c7:d6:28:19:29:2a:2b:48:4a:37:74:36:1a:
ae:cc:f3:45:b2:b8:d2:aa:e4:a7:f9:17:d9:d9:6b:ba:29:cb:
c2:45:ee:db:08:40:bf:72:dd:48:15:cb:1f:ba:f4:bf:9c:60:
2a:25:8a:2d:81:83:a5:7d:23:59:b0:33:40:e6:fa:36:2a:72:
e4:67:78:1f:55:a6:03:3f:cf:a5:c9:bf:bf:7a:35:e0:34:08:
06:62:1a:0d:02:04:70:de:df:51:4a:48:a8:2e:91:5e:11:d9:
eb:b3:54:40:77:f3:60:22:9b:ce:08:70:58:1e:e8:ef:65:63:
5b:d5:c3:64:e7:7d:f3:c0:b5:90:86:14:c6:52:19:ef:0e:37:
90:32:0d:b5:26:43:13:a9:51:2c:d8:31:d2:25:94:0e:fe:62:
2f:53:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:21 2025 by rpki-client