Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa
File: a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa (raw, json)
Hash identifier: QtwlMC57LBzZfm4XDfcBlCn0/oLBWKBiG3F186sxx+s=
Subject key identifier: 69:77:37:D2:C0:6E:FF:B1:7B:32:7E:99:A2:4F:1F:D9:E7:9B:1B:89
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494CC949D5E034B51F9E2CD080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 0
IP address blocks: 199.16.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:49:d5:e0:34:b5:1f:9e:2c:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=f8329d3c-09b6-4a18-8100-852f0d576946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0a:46:75:61:3a:7d:e7:ef:a2:44:eb:3e:5d:
e5:c3:9a:7c:93:6a:0f:59:83:65:89:dc:47:3c:2c:
d8:00:5c:8a:22:19:38:83:78:a0:c6:8a:ca:32:42:
6a:6f:ae:6e:24:13:bb:55:cc:e6:d6:e2:25:44:bc:
84:39:5b:15:83:6c:ad:34:61:29:98:c8:04:6e:d2:
01:1c:80:25:d6:04:2f:78:c3:ac:83:b5:bb:0c:84:
5a:88:ec:ee:db:e4:93:1d:03:7c:4c:24:ee:bf:d1:
3f:ba:5a:b9:84:fa:9b:cf:ab:e0:94:a6:be:7b:47:
cd:74:7a:78:ca:32:fb:89:a5:5f:2c:00:f7:34:ec:
f6:59:a1:2d:a1:d7:34:b9:d7:c4:ef:30:82:8b:5f:
35:40:90:53:35:4f:41:9e:58:9c:f0:3f:2d:1c:ac:
14:25:3f:37:30:83:fb:04:e9:92:14:b3:79:77:94:
4f:27:3c:3a:ec:b1:30:e0:72:82:68:85:c9:2b:4b:
43:9b:f0:17:92:0d:41:95:ab:92:04:0b:0d:b5:20:
aa:04:9f:da:a9:5c:25:bd:ca:1d:e2:20:1a:54:4a:
f3:17:8b:4a:43:d7:30:e4:bd:ae:2f:ae:e8:19:27:
a5:7f:71:6f:b2:50:60:a9:5a:3b:c5:82:9a:01:7f:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:77:37:D2:C0:6E:FF:B1:7B:32:7E:99:A2:4F:1F:D9:E7:9B:1B:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:9e:52:85:7b:32:e1:d9:dd:a1:1e:4b:49:65:10:a1:a5:89:
07:c8:cf:fe:aa:f8:ae:fb:9f:c3:17:8a:bc:38:9e:dc:d6:bf:
0c:a9:f7:f0:b3:73:d5:5e:42:ea:ad:e1:1e:62:09:1f:8a:a6:
95:d8:c3:6f:a4:71:d5:e7:0a:a9:d8:35:32:4b:38:16:ad:a8:
a5:4d:27:4c:94:4b:94:e9:61:2b:3e:17:67:52:e8:4e:91:eb:
5f:7c:bf:35:42:38:06:77:a7:ca:cf:c3:7a:7a:20:d3:f1:be:
83:db:97:36:ee:3a:3f:3d:98:a8:4a:eb:bd:60:ee:94:64:53:
14:f7:83:5f:77:95:59:d9:66:24:fc:1c:7a:36:5b:73:1f:85:
6c:31:8c:95:85:b6:90:b7:58:4c:48:98:7b:36:d2:83:b7:de:
25:6e:58:47:84:e9:e2:d7:8b:e1:20:70:f6:60:bd:19:36:de:
33:37:3f:6e:aa:3d:ec:64:1a:3e:b0:fe:97:6c:a0:e8:8b:51:
c8:48:86:7d:b7:cd:07:b4:f7:02:d3:2f:88:5f:5d:07:b9:b9:
06:f7:ed:3c:f5:29:55:7e:d7:6c:eb:92:6a:56:99:bf:d0:62:
85:eb:09:68:84:68:c7:53:5b:95:ec:0b:17:8a:80:33:6f:42:
41:51:aa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:13 2025 by rpki-client