Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa
File: 58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa (raw, json)
Hash identifier: AGiPGe04ldNdDaw77s3510DtyL/bglMBQCjNs6SkPsg=
Subject key identifier: D9:65:A7:13:9C:3B:EF:E7:16:67:46:85:99:2E:9C:52:B8:2D:43:C8
Certificate issuer: /CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7
Certificate serial: 010D0C9F432858494733FFFB59CE073F3CD58800
Authority key identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 271
IP address blocks: 199.9.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:ff:fb:59:ce:07:3f:3c:d5:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=fd4ea2e9-2983-45e1-a0d6-647be240a29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:7b:15:39:a7:d4:8e:a8:7f:8f:f0:f3:5f:
85:62:61:cc:44:b9:ca:36:32:81:20:f1:64:69:09:
8f:a0:e7:13:e8:f6:c5:25:34:bb:d7:45:06:81:52:
38:7a:e1:2d:bb:06:9a:14:da:5b:9e:5d:39:98:33:
56:91:29:55:5f:a3:6f:68:f7:b9:34:f1:bd:b7:92:
ec:23:5d:ad:d4:4d:e8:3e:ba:75:0c:b9:e3:38:2a:
5f:57:cd:d8:ac:43:da:b1:50:90:d4:4d:aa:06:2a:
48:b1:e4:83:a5:0d:d7:82:20:a9:df:79:1a:e6:79:
ea:d4:57:59:f9:1b:0f:58:4a:92:5c:cf:5e:ec:7d:
6d:eb:db:2b:8d:ea:81:93:41:7f:94:ea:c6:fd:80:
23:c2:43:35:8d:83:b9:50:52:f6:4f:e8:1f:38:72:
54:c7:15:59:0d:56:48:87:43:0b:7e:2f:04:26:85:
03:d4:ff:3a:a3:ca:a0:02:f5:9d:7d:7c:29:aa:ba:
c0:42:68:df:ee:94:54:54:6a:09:30:75:c9:30:a8:
ab:83:34:58:7e:3b:a1:95:40:2b:98:0e:99:b4:1c:
a8:73:56:f7:a8:96:8c:ba:f3:88:c6:43:4e:43:f9:
4d:56:b1:a7:5b:0d:e3:f8:59:d7:d8:c9:7b:b5:f8:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:A7:13:9C:3B:EF:E7:16:67:46:85:99:2E:9C:52:B8:2D:43:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl
X509v3 Authority Key Identifier:
keyid:72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.9.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:71:4f:25:7a:b6:37:e4:03:5e:4d:55:3a:1b:14:5f:e5:0d:
3d:d3:91:c5:59:f2:5e:35:9a:2d:1e:62:2d:e9:0c:13:67:17:
1b:a8:b1:8f:83:03:fa:64:d4:a6:b9:17:71:50:74:20:3f:31:
2d:79:66:84:74:1e:1c:67:ad:7d:d7:bb:60:69:df:f0:a4:a9:
ce:24:82:0b:ad:4f:64:88:a0:79:a1:ff:65:93:31:f9:f8:8a:
a7:c1:fa:bc:e6:a9:8c:25:e4:7a:9a:f1:0f:cb:f9:41:22:f3:
c9:94:11:c9:94:bc:27:56:3b:65:33:cc:8c:d3:49:9c:c2:bb:
8d:eb:d9:3c:4f:00:40:1d:b7:f2:14:5e:3b:43:79:cf:e5:18:
03:b4:4a:be:7f:12:be:c1:e4:93:8c:ac:fc:3b:cb:bb:e4:11:
77:45:0c:81:cd:56:eb:9e:28:5e:f3:01:29:24:0e:de:c6:84:
e5:ea:14:1b:72:c7:58:84:7f:8f:99:1e:15:90:8f:d8:46:90:
39:b1:bb:c1:89:75:5d:a2:a9:14:5c:26:57:52:f7:f3:a3:35:
13:61:c0:6a:32:38:0b:c4:a7:3c:cd:f1:3d:49:0c:a7:81:15:
78:11:06:66:55:02:77:dc:9f:1d:66:60:3a:ec:7c:a7:2c:c6:
f4:31:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:35 2025 by rpki-client