Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/c7facfa9-a2c1-35a6-ac09-42da4355cc54.roa
File: c7facfa9-a2c1-35a6-ac09-42da4355cc54.roa (raw, json)
Hash identifier: 2nBuEj98Z1zEZ29UGdOUsvP7lTph2+umVuunZfZ6Nl4=
Subject key identifier: 6E:81:52:EA:80:57:C0:84:05:A8:8D:FA:51:62:CC:05:AA:92:68:5F
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F432858493D13B61E02A8A25C7DBD6300
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/c7facfa9-a2c1-35a6-ac09-42da4355cc54.roa
Signing time: Wed 19 Mar 2025 09:57:51 +0000
ROA not before: Wed 19 Mar 2025 09:57:51 +0000
ROA not after: Tue 17 Jun 2025 09:57:51 +0000
asID: 55154
IP address blocks: 199.96.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3d:13:b6:1e:02:a8:a2:5c:7d:bd:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Mar 19 09:57:51 2025 GMT
Not After : Jun 17 09:57:51 2025 GMT
Subject: CN=ec8f1a31-c563-4f5c-ba24-0fb9953decb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:c1:f1:7a:cf:47:f7:5a:a2:ee:f5:a0:b0:
df:e7:f2:1a:d6:8c:10:7f:cf:6b:b4:a7:07:84:55:
9c:61:a0:71:6c:46:af:36:98:99:f9:31:1d:22:97:
ec:b0:21:59:c8:f3:aa:14:ad:62:28:bd:68:75:1a:
66:63:3e:f3:43:10:f3:94:d4:41:9a:95:7b:c5:93:
a4:8a:e2:ff:0f:39:6e:20:61:a4:08:15:2a:da:7d:
99:e3:ea:cf:e4:04:87:c9:36:81:4e:48:a9:e0:ba:
86:2f:c3:08:f3:da:dc:a1:1f:26:9a:7c:1f:1e:ef:
59:48:3e:f1:5d:c5:c9:1c:c1:37:89:19:79:6d:e4:
ae:42:22:8c:1a:fe:ea:3b:b6:4d:62:88:d2:ad:85:
30:3a:6c:b3:87:8b:cb:0d:65:ab:4c:2d:b8:60:f2:
a2:27:0d:48:25:70:0d:14:ad:4f:62:67:3e:bc:7f:
0b:61:66:3e:df:a6:36:a5:f5:5f:dc:67:3b:ae:13:
21:ee:10:42:22:45:be:13:85:44:05:60:ec:93:88:
24:ae:10:aa:f5:ed:d5:bb:f2:81:f7:8a:ec:1e:45:
3e:2b:db:a7:2a:53:16:d1:54:31:17:8e:53:24:fe:
f5:f5:b6:24:23:21:51:cd:9d:7a:64:d9:16:6a:59:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:52:EA:80:57:C0:84:05:A8:8D:FA:51:62:CC:05:AA:92:68:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/c7facfa9-a2c1-35a6-ac09-42da4355cc54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:d2:28:b6:a0:df:a1:d0:0b:04:a4:6f:f9:e7:af:66:7a:c1:
cb:8a:66:12:32:77:e6:d5:54:fa:c3:05:eb:78:a8:14:83:9f:
51:56:5c:2f:d1:8a:73:6c:4f:49:c2:a3:fd:46:6c:38:1b:90:
32:b9:17:81:f2:d8:d9:da:12:e6:ad:a0:65:2b:c9:75:d2:66:
88:f1:d3:1d:5c:a2:0e:64:d1:d8:48:07:42:c1:f6:a8:a2:47:
1f:74:cc:22:37:68:fe:2f:5b:75:7c:0f:d7:11:9b:39:45:07:
5d:4a:47:06:db:9f:0c:e0:8b:dd:06:d8:65:4a:99:1b:7a:00:
5c:19:5d:f6:52:22:77:e0:8d:57:27:98:79:ea:e4:0b:af:27:
d7:65:25:95:53:40:9d:98:22:3f:51:a2:94:d2:ba:b4:47:de:
2c:1b:83:a3:f9:0e:c3:04:ee:fb:c0:a2:fd:8d:7b:c8:07:e3:
b2:ef:63:da:6c:c7:57:d3:57:06:c6:cc:a5:51:fd:b4:e4:8f:
ba:be:4e:39:ea:be:f4:84:e6:65:3e:1f:83:79:1f:5b:b3:0b:
6b:03:77:e8:b4:56:a1:ec:34:03:77:36:e1:42:cb:59:34:f4:
97:ec:48:19:50:f3:45:ba:3b:8c:4c:bb:1b:35:1b:5a:49:07:
e9:61:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:45:18 2025 by rpki-client