Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa
File: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (raw, json)
Hash identifier: BrzKA/yA/uW/It0fD0VZ9GS8kUKSzx7UJOk/d8C92sk=
Subject key identifier: 06:3D:20:50:37:2B:C6:81:65:04:A7:53:2F:5F:68:DF:68:FD:AD:90
Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823
Certificate serial: 010D0C9F432858487A2078DD2883B96E2FB4C880
Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 15177
IP address blocks: 199.102.60.0/22 maxlen: 24
199.191.120.0/21 maxlen: 24
208.74.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:78:dd:28:83:b9:6e:2f:b4:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a485a4-e936-4174-8999-571e03203823
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=39df483f-bb27-43b1-a24a-6d7305254a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:0b:0d:4a:60:48:30:6a:5c:ac:90:75:9d:
7c:72:3b:df:9f:2f:13:e9:90:1c:db:51:f2:bf:84:
e5:ef:f5:ad:7b:f6:94:70:f2:d9:e5:bb:46:a2:f2:
ba:23:05:90:fa:5c:72:83:a0:ee:90:d0:ad:34:4e:
9d:6b:86:d6:15:aa:38:11:1e:ca:27:24:92:09:0d:
80:fd:cd:39:d4:db:53:35:c1:95:21:1f:ae:d4:7c:
40:dd:2c:ab:eb:35:cf:ca:8e:ec:be:41:4e:a0:22:
0d:fc:4f:76:fe:b8:28:87:a1:ab:ae:a7:73:88:eb:
22:d7:da:7e:85:42:a4:f0:9e:3b:4a:fe:ea:a9:f3:
eb:e4:96:72:65:fe:56:58:39:17:fd:03:17:5a:ac:
95:e4:7c:88:3c:c4:29:56:6b:c5:94:06:45:2a:73:
5c:aa:55:90:45:43:99:bf:50:7c:e4:c2:86:66:5f:
1c:db:5f:b1:34:b4:fd:fb:dd:d0:e0:2b:32:b4:5d:
9e:55:00:9c:93:a9:3e:65:d9:7d:9a:7a:c2:6f:d3:
80:17:5f:8c:a9:df:e2:f1:b7:e2:5f:d7:e2:57:68:
ed:a2:ba:47:f3:83:5b:3d:54:34:07:17:14:35:3a:
8b:46:55:34:8a:e1:24:bd:7a:ec:0b:8e:7b:8d:da:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:20:50:37:2B:C6:81:65:04:A7:53:2F:5F:68:DF:68:FD:AD:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl
X509v3 Authority Key Identifier:
keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer
sbgp-ipAddrBlock: critical
IPv4:
199.102.60.0/22
199.191.120.0/21
208.74.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:3e:f1:67:06:4e:9c:38:c3:02:95:8a:2d:4e:e3:fa:a4:d8:
e9:ed:13:68:b4:98:02:b6:2d:e9:98:6d:75:21:fe:fb:a3:38:
c3:0b:04:4c:06:94:7e:1d:d7:85:fe:a6:22:26:da:e5:36:81:
9e:04:83:db:dd:fb:09:4e:08:83:03:f4:15:02:9c:6e:4b:39:
0f:90:41:64:c1:20:8f:23:a5:71:7b:b7:01:14:45:0e:62:3d:
30:27:c5:2f:55:4a:29:95:ac:56:ed:fd:fb:9e:62:22:c6:4c:
16:b8:30:e3:1c:d2:40:c5:49:01:8c:d4:5a:cc:04:49:b1:3b:
15:ff:b6:9b:c9:c2:29:58:34:8c:39:12:1c:95:15:1f:d0:19:
bd:eb:27:14:38:51:6c:a0:f8:84:d0:93:7b:ba:1a:f7:e2:8a:
4f:d6:88:90:70:4a:88:81:84:1b:a0:48:aa:86:2b:48:37:de:
9c:87:00:60:53:3d:1e:db:66:ca:87:b7:2f:c5:d5:89:3c:c0:
ef:d6:b7:0d:51:9e:0e:8e:a0:b8:0f:05:94:38:b9:b3:26:6d:
82:8c:f6:99:dc:47:ae:14:31:02:b7:52:5c:0c:d9:64:9b:ba:
33:6a:ed:bc:8c:fc:39:49:32:b9:6a:66:47:9b:9b:ad:5c:b1:
b5:81:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:00 2025 by rpki-client