Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa
File: 204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa (raw, json)
Hash identifier: ycbFwZ5mX5FCn9b3r8ZaNh8lnRixFyY4SUDJKo9PDec=
Subject key identifier: DB:CA:88:C7:93:65:9A:EF:BB:41:45:7A:4F:85:73:B8:3A:C9:8F:FD
Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Certificate serial: 010D0C9F4328584917DBFD73B8CBF14E84BA3200
Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 53589
IP address blocks: 199.16.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:db:fd:73:b8:cb:f1:4e:84:ba:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=4bc498c6-8d26-47b2-bbaa-f42cf2abc7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:17:e9:04:18:49:05:38:c7:82:aa:22:45:
da:7e:35:7f:3c:a5:f2:35:84:04:00:1c:87:5e:01:
62:82:ed:c9:de:3d:ea:96:ec:48:b2:37:2d:2b:7b:
ff:ca:fd:1a:b0:88:fb:bb:77:10:9f:18:ad:5f:e8:
89:c2:5e:96:ab:a4:58:b0:e8:d3:f1:13:2e:3c:50:
fb:15:2f:45:14:4e:fb:69:7b:04:89:d7:36:98:00:
1b:5f:4d:02:f3:83:68:91:09:70:d0:70:e2:d0:41:
4f:0a:3c:2e:e2:49:fa:94:35:f0:cc:2c:ef:44:8a:
4d:ec:2b:f3:97:97:90:70:4e:a2:a7:ce:14:58:81:
d9:f3:db:aa:64:30:fd:fe:8d:2a:55:e5:e4:68:a9:
01:7b:0e:70:e0:27:a9:03:1d:a2:cf:77:a7:a0:91:
bd:e3:cc:af:25:2d:f7:10:78:ce:9c:0f:68:02:20:
23:33:c5:1b:de:22:29:6b:0c:a9:58:fb:26:83:ae:
84:e5:1a:e1:09:e5:aa:9c:0e:5b:60:d3:08:f8:50:
9b:95:7d:66:18:13:92:b1:ed:81:9b:3b:c0:4a:d1:
ad:bd:15:ca:80:17:96:8b:e1:a2:87:ea:af:ec:01:
26:64:44:9b:4a:a3:45:0b:1a:44:c3:6a:5b:f1:7b:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CA:88:C7:93:65:9A:EF:BB:41:45:7A:4F:85:73:B8:3A:C9:8F:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl
X509v3 Authority Key Identifier:
keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:d9:7d:09:b1:ca:13:82:aa:b5:8d:f7:f9:46:b6:50:a4:08:
00:f4:1b:37:8b:8c:b1:d3:a7:1f:e0:0e:e9:d6:c3:3d:00:ee:
b0:5b:f1:f7:84:61:0f:44:8d:d3:a4:df:1f:1a:d4:d2:3c:d6:
66:74:d1:dd:e9:fc:d4:86:90:57:36:02:2a:b2:6f:cc:f6:61:
0e:b9:8b:51:0d:cb:08:6e:37:a5:42:99:0e:c0:2d:6c:27:42:
45:31:b3:4f:f8:36:45:6e:5c:bb:b4:e2:ca:0b:52:80:dd:16:
59:16:db:38:92:a0:35:48:23:62:4d:77:b1:ee:85:a2:a6:48:
b3:b4:df:0f:0d:fd:1b:3b:24:f1:1b:6a:64:a2:ae:e4:37:e4:
2f:71:7a:aa:bd:39:2e:1e:2f:63:57:8d:d3:54:b0:fa:9d:ab:
1b:e9:20:d7:bf:f7:6c:56:a4:a3:c1:62:89:10:47:35:2c:57:
1a:52:32:26:30:c1:b3:9a:1a:91:8e:50:42:b0:72:4d:cd:d2:
cc:c3:e7:d8:6e:62:c7:07:3e:59:f9:58:2b:56:e9:8d:74:8a:
82:ae:cf:f7:78:6f:4a:0b:6a:c3:23:40:82:6c:a5:60:61:03:
0e:fc:c1:57:e7:9c:f9:ad:fa:7c:a5:7f:57:40:fe:6a:8b:a1:
e4:1e:78:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:11 2025 by rpki-client