Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/dd768dac-9053-35bd-8a0e-3c7bfcfd7e87.roa
File: dd768dac-9053-35bd-8a0e-3c7bfcfd7e87.roa (raw, json)
Hash identifier: b/dxSRw8gcpZ8SOB6A1XdqOt2YXDJgnzc7il87wWJHs=
Subject key identifier: 82:73:41:56:D0:24:59:93:DB:9C:B2:03:FE:9D:E3:84:03:DE:98:9B
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F43285848AD21B232B6B1D6A761240880
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/dd768dac-9053-35bd-8a0e-3c7bfcfd7e87.roa
Signing time: Sun 26 Jan 2025 20:29:37 +0000
ROA not before: Sun 26 Jan 2025 20:29:37 +0000
ROA not after: Sat 26 Apr 2025 19:29:37 +0000
asID: 7029
IP address blocks: 199.96.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:21:b2:32:b6:b1:d6:a7:61:24:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Jan 26 20:29:37 2025 GMT
Not After : Apr 26 19:29:37 2025 GMT
Subject: CN=9647e1c5-ebcd-4a39-b0dd-b031243f7e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:9f:25:77:d5:c0:dc:ad:1f:ea:75:98:d5:
19:c5:ba:8f:dd:cd:53:0b:22:2b:63:92:9f:26:94:
d7:bb:6b:dd:85:4d:0d:e9:b7:c8:ec:c4:25:ea:c7:
30:45:2f:ae:70:36:f1:34:d2:b1:67:e3:dd:1c:8c:
2e:52:08:7e:1c:18:1d:ef:07:b6:fd:fb:18:3e:f5:
36:97:b0:66:1f:8d:b3:99:e5:26:57:aa:53:92:17:
7d:6f:39:d8:4b:84:65:01:aa:ca:b6:4e:7f:9c:6a:
50:e8:09:60:97:ef:8b:60:ba:de:63:a4:81:75:fc:
7e:d0:b3:87:9e:43:d1:35:da:33:cf:b5:e7:ef:9c:
6e:9e:8a:fa:63:de:3a:e8:f7:11:a3:b5:2a:07:ab:
ec:9f:3e:00:49:5f:d2:48:36:04:b7:87:5e:a1:32:
7b:1d:d7:7d:01:17:45:21:cb:f9:8b:a0:4c:20:66:
38:58:bd:18:5e:c9:aa:4c:5f:43:70:1d:c4:b9:2c:
be:53:44:eb:ae:a8:60:7f:9f:0d:1b:44:4c:1e:08:
1e:fc:94:94:bd:d2:5a:d4:1b:76:de:8f:91:a3:14:
89:56:1b:aa:01:c6:24:f5:d2:60:11:4f:86:e9:bd:
6f:0b:f3:f0:a0:8f:ec:a1:f0:73:88:c7:a1:3c:a8:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:73:41:56:D0:24:59:93:DB:9C:B2:03:FE:9D:E3:84:03:DE:98:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/dd768dac-9053-35bd-8a0e-3c7bfcfd7e87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:d9:fd:6f:26:8b:d3:50:0f:3f:d2:0a:ac:69:c6:f0:42:05:
5a:73:36:12:12:7c:19:bc:5a:05:99:de:53:c6:91:33:1b:81:
a3:bd:80:39:76:58:69:ee:c4:d0:5d:83:dc:80:8f:26:cb:ac:
0f:d2:ab:0a:a4:50:db:31:4f:fc:83:7c:1c:d0:b5:e9:82:11:
0f:95:d3:e4:54:96:b7:56:f0:ca:7d:43:0b:43:53:08:87:1b:
a0:57:68:34:21:fb:f5:91:74:e2:5d:9b:05:2a:a3:f4:d1:50:
0a:53:5a:dd:95:3c:f5:22:c2:bd:c9:ff:47:c6:9c:c6:82:fe:
fc:c3:28:9d:b1:88:86:66:3f:bf:77:1f:71:d5:a0:91:1f:1d:
82:2b:cb:b6:c6:db:01:24:1f:19:e4:76:42:34:0c:71:54:42:
fa:57:8b:31:79:c5:f3:ba:70:1e:09:f5:dc:db:14:76:1a:1e:
5d:cf:96:df:33:e3:4e:dd:f5:5f:9a:45:d9:9d:29:b3:e3:07:
b9:23:1f:49:4c:16:0d:42:6b:ec:0f:9c:25:09:08:58:41:61:
fd:78:5f:9c:c9:ee:89:b1:db:78:bd:9b:f6:fc:0a:90:2e:eb:
1f:c8:b1:8d:a8:38:8d:6a:c9:b8:c4:6b:f7:5b:84:9c:2c:61:
58:c3:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:18:54 2025 by rpki-client