Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa
File: 10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa (raw, json)
Hash identifier: VVyi+qcmWPyMdk6ApA0ZHEd6QLQJTgmahychUDmnkFM=
Subject key identifier: 68:31:D9:21:F8:87:4E:73:38:5C:71:06:82:22:7C:78:AF:92:46:F8
Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial: 010D0C9F432858489D05E9649486AC2941E7F720
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 125
IP address blocks: 199.64.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:e9:64:94:86:ac:29:41:e7:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=67984d88-e099-4126-a829-7b7b9de01d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ca:77:d7:d6:b3:6a:29:ef:8f:8f:f8:db:cb:
5f:98:6e:b2:51:4a:ee:60:97:53:84:35:cf:6a:92:
87:77:40:a6:a9:cf:ae:33:86:e4:47:5c:b7:aa:1d:
08:61:5c:de:2f:da:9d:13:dd:47:55:41:f1:4b:ea:
b1:a1:bd:0f:82:7c:6c:c4:06:7e:c4:78:fd:3b:1b:
fc:e8:93:ca:38:0b:e7:0a:92:43:e9:78:36:a3:32:
99:82:f0:b4:9c:67:83:0a:db:e6:4f:a8:cb:d2:3c:
1c:03:0b:89:45:a4:9a:06:59:ff:4c:ec:d0:56:05:
01:d3:54:73:e0:6f:15:1c:d0:df:12:67:34:c2:69:
c7:1c:9c:9d:32:e0:41:17:d9:39:b8:55:6f:d1:cd:
37:e1:67:f5:5a:a7:60:c1:a5:99:e2:d1:c4:5d:6b:
8c:ca:e9:e7:98:ed:cd:26:b4:8c:31:84:a0:3e:a0:
c5:b1:7d:83:e5:96:f9:66:99:05:ee:15:bb:24:ad:
0f:6a:9e:e9:f5:da:6c:87:da:6b:5a:d3:cd:c3:c4:
74:c1:37:9e:e8:48:86:8a:64:05:7e:da:b0:1f:62:
fe:fa:c1:ce:59:94:63:28:72:14:20:81:3a:c2:cb:
9c:31:57:72:a4:e9:e1:15:93:df:b6:3b:f1:3c:2d:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:31:D9:21:F8:87:4E:73:38:5C:71:06:82:22:7C:78:AF:92:46:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
X509v3 Authority Key Identifier:
keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.64.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ec:e3:cc:13:ef:33:6f:79:b9:55:ac:10:3e:57:18:05:5f:
44:23:f6:bf:90:9c:eb:a4:b4:a1:ab:69:35:24:f3:bf:d9:73:
47:40:38:ac:de:69:58:f0:ca:30:fe:89:f0:99:e8:1a:f6:f8:
09:f0:03:75:9b:0f:a8:66:ed:0c:7d:3a:4f:77:9d:6c:dc:df:
83:aa:7e:2b:7c:1f:50:98:0a:99:12:f2:7d:cd:e3:b5:66:2d:
67:f0:38:9a:4f:1e:d5:33:9b:2b:8f:61:53:77:9b:29:81:50:
b1:72:34:a5:c6:40:ac:30:69:8b:86:4c:db:e0:6f:c2:94:5c:
08:3a:d9:9d:11:85:90:a6:dc:7e:08:12:f2:2f:72:d8:da:46:
5a:fe:30:7f:1e:59:05:4d:4b:42:71:8b:f3:62:7d:9c:8f:23:
33:bf:5d:ce:0d:25:9f:d2:ee:39:f6:0d:1c:bd:83:6b:fa:46:
1e:f7:6f:e2:9d:b7:2f:c6:b0:73:31:b7:c7:9c:8b:d5:f6:5b:
bf:7b:64:80:b2:07:f3:59:7e:0c:76:a3:29:27:9f:36:1d:c1:
23:04:cc:fe:9e:05:4e:7e:49:32:b6:07:22:5c:08:1a:30:30:
62:bf:17:78:6c:9c:60:2b:65:9c:dc:03:33:ee:e0:c7:04:5d:
38:8f:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:11 2025 by rpki-client