Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/e99281c6-ee69-3c62-a462-90a66f5d3ca8.roa
File: e99281c6-ee69-3c62-a462-90a66f5d3ca8.roa (raw, json)
Hash identifier: Lae2juc+deds5uYs7xSNkx695tU1g2Ie8aOUpn22pMQ=
Subject key identifier: 22:01:D0:3A:35:C3:69:3D:47:9F:16:E6:53:41:69:2C:AD:46:B8:A3
Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial: 010D0C9F432858493B3A6971C65886C5E5F3AB00
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/e99281c6-ee69-3c62-a462-90a66f5d3ca8.roa
Signing time: Tue 18 Mar 2025 18:04:13 +0000
ROA not before: Tue 18 Mar 2025 18:04:13 +0000
ROA not after: Mon 16 Jun 2025 18:04:13 +0000
asID: 395418
IP address blocks: 199.187.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3b:3a:69:71:c6:58:86:c5:e5:f3:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Validity
Not Before: Mar 18 18:04:13 2025 GMT
Not After : Jun 16 18:04:13 2025 GMT
Subject: CN=6fcd96a6-5abb-4ef6-b60e-b3bbd118d5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:83:18:1f:dc:ec:73:53:ea:30:79:6c:a8:
0f:44:ac:6e:e1:3a:f7:ec:ab:96:24:08:64:a6:a2:
02:b2:4a:b4:3e:37:88:d8:d0:f1:c6:01:f0:70:31:
15:65:74:f3:b0:e8:0a:5c:f8:e1:d3:57:65:c7:9c:
db:7c:8a:86:65:e1:70:3f:33:16:31:95:7c:4f:e3:
c6:e7:ec:81:97:f5:ad:d3:3b:73:0c:e2:22:a7:7d:
27:a8:c7:28:1f:f2:32:16:f4:b1:00:7d:35:aa:b1:
07:b5:97:42:f9:98:48:1b:64:f0:a0:ac:5b:fd:ac:
71:ac:27:10:5e:f6:27:e1:2c:c6:64:6f:47:80:5d:
1c:56:96:d1:eb:46:c6:7c:ee:23:59:01:eb:f3:1d:
ea:8c:c6:91:aa:b1:52:d1:9f:ca:4e:e2:f0:8f:7b:
44:ca:ce:29:ed:c7:15:e6:56:bd:04:f5:63:4c:76:
b1:d1:48:a1:09:e9:21:3f:2c:2f:65:93:ac:ed:69:
89:0e:ab:6c:c2:f7:7e:18:00:36:00:c5:96:78:75:
a4:c8:c2:da:44:db:70:ef:62:c8:30:56:9d:0b:e6:
15:46:c9:a8:97:cd:6f:5a:20:75:32:d9:80:4d:95:
70:0f:91:a0:19:55:ea:b3:ab:8c:f0:11:2e:aa:bc:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:D0:3A:35:C3:69:3D:47:9F:16:E6:53:41:69:2C:AD:46:B8:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/e99281c6-ee69-3c62-a462-90a66f5d3ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
X509v3 Authority Key Identifier:
keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:3d:b1:1b:6d:1d:9c:0c:1b:07:05:f7:c9:06:80:48:08:6b:
f9:2c:7b:24:de:da:8a:ca:50:70:5e:3d:21:83:ce:d7:9f:7b:
73:4b:7f:f3:62:0e:27:97:cd:6f:a4:f7:08:05:ae:df:78:b9:
6d:18:91:75:a5:70:f9:2d:4e:13:03:74:8b:b9:d2:42:8f:9f:
ea:f8:6c:16:17:8e:71:64:96:61:b7:6c:e9:3c:10:f4:e2:11:
11:ed:0b:31:54:cb:e9:21:e7:64:ca:0d:80:be:b8:53:2c:fb:
d9:84:1e:49:79:7b:67:d9:64:5d:f1:ee:8c:03:f6:b6:7d:f6:
0d:c0:b3:b9:3d:bc:ae:97:27:bd:4c:18:a8:e1:5c:11:1c:bd:
1e:11:fd:a5:86:d2:fb:b8:ea:f7:b5:0a:da:57:cb:97:7b:c5:
4a:98:1d:1c:11:b1:9f:4d:fc:8b:f9:28:28:c5:70:e6:37:25:
88:37:0e:92:f6:58:ce:e0:20:ee:e7:52:d7:ad:76:f0:a5:90:
be:e5:66:b8:90:d6:be:2e:3f:82:7b:76:d8:a8:b1:1b:ce:60:
a8:63:fc:e6:22:47:af:7f:73:31:46:be:c1:1c:15:bb:c2:1b:
36:69:0e:1f:dc:90:d9:14:77:7b:1d:cc:09:88:1b:6c:7f:4b:
66:45:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:55 2025 by rpki-client