Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa
File: a0319291-6260-33b7-94e3-177209ea6dc7.roa (raw, json)
Hash identifier: TZaa7wQ29pqfKf6HWxsSEdmRZoVl5tgPg6PFcqzR06g=
Subject key identifier: C0:DA:C0:81:C7:16:64:26:ED:0F:FC:E6:DA:EC:AA:F0:A3:E1:D3:6E
Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Certificate serial: 010D0C9F43285849350EA7583267B2DA89CB3800
Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 394449
IP address blocks: 199.68.53.0/24 maxlen: 24
2604:3dc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a7:58:32:67:b2:da:89:cb:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=24041d97-3d7b-4e4e-9801-89fb8bd147d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:ca:78:c1:6f:e2:7f:e3:79:09:e4:33:22:
5c:e6:05:3e:f0:44:8b:7a:3d:f2:2b:cd:ce:57:97:
98:70:6b:13:b8:b5:c2:b4:cc:bd:2c:df:5a:44:1e:
c2:c4:68:db:51:b8:73:19:1b:4a:8f:cc:a0:ca:f4:
69:b6:4a:79:95:28:15:d7:89:d3:7a:90:89:51:93:
5b:65:97:ad:10:88:e0:dc:52:b3:cc:dd:17:2d:7b:
dc:4f:82:4d:69:bc:e6:81:fa:17:a4:66:b6:ae:49:
44:17:45:3a:24:11:3f:72:46:8c:31:db:43:b5:db:
cb:1e:6a:4e:d4:1f:7b:ab:11:f8:75:96:c1:9f:7b:
cf:14:6f:b4:56:26:a4:8b:81:b4:76:ec:68:3e:bb:
e7:65:f3:3f:4d:03:a9:45:ab:35:05:6f:d7:6c:ca:
ab:b6:53:17:b1:98:14:1a:d3:94:6f:67:ea:d4:d8:
20:68:63:4f:b8:8c:55:9e:c3:c4:7c:06:f9:74:8b:
94:bc:dd:5a:b5:87:03:47:84:5c:1d:ad:e7:77:b0:
9e:52:7d:b8:e1:fd:f2:68:9c:3b:3f:7a:47:8a:8a:
f0:8c:bc:f6:9a:5d:13:7d:d2:e4:0d:32:1b:93:04:
48:21:ab:1e:d2:0f:5e:35:8f:e1:1c:50:07:3f:dd:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:C0:81:C7:16:64:26:ED:0F:FC:E6:DA:EC:AA:F0:A3:E1:D3:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl
X509v3 Authority Key Identifier:
keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.53.0/24
IPv6:
2604:3dc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:bc:10:97:14:0e:39:1d:1a:31:d8:8a:5b:0e:30:0c:bb:ed:
79:ee:c4:10:f5:35:bf:ee:75:27:0a:9c:27:46:a6:66:ad:0f:
cb:ca:29:a1:40:ef:23:6e:fa:d0:80:8e:ae:ff:b6:2b:4b:05:
a3:5d:c5:02:c3:1a:dc:3e:65:27:c7:8a:e1:55:8f:99:03:54:
51:8e:64:c8:54:5d:fb:e0:53:3f:b4:06:d2:23:00:94:49:3d:
51:32:9d:45:e7:80:5f:6e:50:ea:fa:0b:36:f7:4e:0b:3f:a8:
b7:ce:d0:32:4a:9d:d8:b7:26:10:43:1e:ef:ab:21:ca:64:2a:
c0:cc:7d:30:94:41:4a:96:ab:f5:eb:32:32:e2:22:af:87:55:
ef:2c:48:ba:c1:e1:59:fe:de:5b:8e:33:b1:1c:0f:bd:9d:ab:
64:90:8e:ed:40:99:13:94:cf:1f:c7:d8:01:09:b8:a0:04:7d:
70:af:91:14:0c:4c:10:50:c0:16:28:e4:eb:db:26:36:82:42:
b6:e4:39:9a:97:ae:ac:64:6a:d0:d1:c3:9f:31:20:b3:0d:43:
da:e5:b0:99:16:32:0d:c2:d0:89:c2:cd:4a:b7:20:65:fd:52:
a3:4d:17:c5:8f:b1:dd:f1:56:8e:5e:a3:cf:cb:34:6b:fe:b8:
62:3a:59:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:25 2025 by rpki-client