Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa
File: 3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa (raw, json)
Hash identifier: cWHFKd/CFthhgPj4FU+Q4TBaLNx+77u2CHGPqcpCAGU=
Subject key identifier: 9A:00:97:57:DF:61:4D:E1:63:08:F2:6D:45:D8:5C:36:00:16:B4:9F
Certificate issuer: /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial: 010D0C9F43285848DA70FBE7865722ECA28A49F0
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 29838
IP address blocks: 199.167.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:fb:e7:86:57:22:ec:a2:8a:49:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=1ac1742c-1546-41d6-9286-88520beaaec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:a5:ff:ae:68:ba:be:22:10:f8:9c:97:59:
28:0c:91:a4:1d:f2:52:bc:50:f8:be:b8:38:5e:4a:
bd:0a:ab:4b:92:c6:d7:89:c3:b9:76:62:17:29:ee:
96:1b:63:6f:4e:60:bf:a8:03:14:e7:03:69:9b:bd:
e3:b9:1f:2a:c6:a2:8f:b4:c9:ab:02:4d:36:19:27:
41:64:99:de:16:09:f7:32:c5:30:27:31:d2:10:9d:
e5:38:64:75:df:5b:93:d1:e5:cf:b2:a9:ff:e5:57:
4b:27:f7:7d:b2:08:6b:97:e8:de:bb:e0:b4:26:fb:
3b:52:3f:b8:a1:b4:fb:b0:e7:95:80:0f:c2:1a:fe:
63:87:61:d3:cd:9d:00:34:68:c0:40:d8:09:ef:8e:
ed:5b:b2:4e:e9:64:67:6a:8b:be:8f:ec:3d:3c:69:
a3:fa:ec:26:63:ef:9d:aa:b5:de:44:54:94:9b:64:
50:a7:08:ef:87:99:d9:50:d9:0a:54:94:7e:7b:4c:
99:07:ea:e1:a8:93:0c:17:ff:ed:ae:fd:fb:3b:f8:
13:bb:e9:69:7c:de:a3:ce:6f:17:47:9c:f4:b0:b1:
c9:17:48:e3:ed:8d:51:f0:a2:f0:fe:40:de:0e:12:
f8:f7:87:ff:85:2f:73:5e:9b:bf:57:67:56:3b:88:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:00:97:57:DF:61:4D:E1:63:08:F2:6D:45:D8:5C:36:00:16:B4:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
X509v3 Authority Key Identifier:
keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d3:be:7e:f6:9e:61:19:88:06:8b:d2:ba:c9:09:67:cc:6f:
7b:8d:e1:66:fc:4b:24:b0:d9:57:5d:eb:29:d9:f2:78:33:f6:
a5:24:32:2a:44:a7:a6:5d:6d:06:54:c1:f9:ca:4e:46:04:98:
ab:b9:d2:d9:a8:b8:e6:f7:13:37:0a:26:eb:a1:2d:59:24:90:
2d:d2:f7:fd:08:af:05:a0:b6:17:76:f7:e4:c2:a2:0e:8b:76:
9e:a6:6b:32:f3:88:d4:f0:ef:1d:61:94:1c:6e:98:50:fa:78:
4f:73:1e:34:4d:a0:17:7f:c2:d7:d2:78:c4:36:f4:f6:53:fe:
82:68:74:4b:97:80:f2:8c:bd:e2:f2:bf:48:b7:6e:d3:7f:91:
bb:b8:ed:51:6b:70:05:be:22:e2:32:28:22:f9:e6:61:4b:ca:
69:a8:9e:55:1a:da:84:98:c3:0d:c0:e3:c7:29:1e:13:13:c5:
1f:a8:c4:a5:4d:bf:42:03:a1:d8:ed:36:7d:64:d1:5a:99:2c:
c9:73:70:41:73:0b:82:bf:59:3b:7e:e0:12:2c:ea:f2:4a:97:
a4:5a:56:4a:8c:ba:20:a9:86:1f:98:4a:b6:84:b7:d0:2e:7b:
55:14:da:08:b9:b2:8e:65:e3:a7:46:25:da:1e:45:90:01:ff:
3a:0a:39:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:41:06 2025 by rpki-client