Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/1d49dd31-0c53-33da-9567-96af68c51aa9.roa
File: 1d49dd31-0c53-33da-9567-96af68c51aa9.roa (raw, json)
Hash identifier: +scaOuo2LQfwyHmvB7stEH4bF/QGWQ0Kr/70SuieT0A=
Subject key identifier: 8D:25:BF:F9:96:C0:CD:D1:25:54:57:5C:80:E9:37:12:D6:FD:19:6D
Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial: 010D0C9F43285848B62613BB49278579BF980A00
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/1d49dd31-0c53-33da-9567-96af68c51aa9.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 125
IP address blocks: 199.64.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:13:bb:49:27:85:79:bf:98:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=d1b08350-2d77-45f7-932d-3e3766927489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:04:4a:26:11:83:e3:ac:ee:3a:88:95:ac:
d0:6f:14:20:39:e3:b2:63:fd:67:c7:ea:d6:bc:ce:
14:53:f6:86:d4:25:89:cf:d3:0f:e1:2f:9e:72:e4:
74:38:de:47:45:db:70:cc:d8:06:d8:34:95:3e:3e:
c4:44:de:8c:4d:7c:92:75:e0:2c:25:ae:71:1b:8a:
7d:99:14:cc:25:55:f9:21:bf:21:ca:12:16:41:e4:
cf:a2:bd:46:95:a3:0a:42:e4:da:ee:83:aa:e0:da:
f8:38:f9:7e:9f:88:19:ce:dc:0d:f5:af:82:32:02:
d6:30:a3:15:80:dd:9e:c2:ec:58:b1:62:26:58:78:
b0:75:df:52:dd:d6:b9:8a:dc:fe:ea:7e:41:dc:1b:
23:1f:09:a7:be:f9:3c:05:0c:70:20:e0:aa:31:12:
34:44:95:a6:7a:b4:f8:ae:6d:77:c8:f5:42:34:41:
3f:24:71:df:06:51:53:6b:5e:eb:ba:e3:89:b9:15:
be:5d:50:82:67:ff:6f:50:60:02:c0:b3:3e:ce:9f:
24:31:1d:29:3b:d2:b7:58:43:d8:8d:a4:b9:71:c5:
7b:bf:fc:ee:35:cf:fb:b7:b0:61:01:13:8d:1f:fd:
bf:38:8b:ee:6a:bc:98:e3:2a:7a:9c:d1:12:f1:49:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:BF:F9:96:C0:CD:D1:25:54:57:5C:80:E9:37:12:D6:FD:19:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/1d49dd31-0c53-33da-9567-96af68c51aa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
X509v3 Authority Key Identifier:
keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.64.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:e8:ed:15:c3:49:42:fb:13:8e:0b:31:a3:7e:c7:7a:3f:19:
ea:bd:bf:7c:55:0d:94:9d:1e:97:a7:c9:50:2c:c3:1f:99:a2:
7c:4f:62:0f:94:34:e6:6f:3c:35:ed:a6:d5:ad:2c:6e:90:04:
c4:10:38:ce:11:a6:5d:68:79:c3:dc:07:42:cc:5e:b6:b9:9c:
7b:b4:c5:46:02:ab:7d:a1:34:5f:e4:e8:12:79:b3:c3:94:fe:
45:79:7f:7c:15:a2:b7:41:bb:f3:0c:f0:98:94:2e:47:61:a4:
9e:5e:be:51:53:6f:a2:dc:6d:c7:a0:65:f6:82:ed:3e:93:de:
18:d1:96:33:f3:4f:4d:7f:93:10:a1:3c:66:83:63:55:d9:b4:
a0:4b:d7:88:fb:d7:95:79:c9:3b:9b:60:19:d0:01:e1:78:4d:
26:98:f1:82:7f:0b:7f:71:0b:ab:eb:4d:87:41:c1:ab:66:7d:
26:43:21:98:37:af:a2:a9:e9:85:32:6c:65:9a:e1:21:fb:7c:
f3:a2:f9:e2:0f:61:a6:3f:73:66:dc:f1:39:49:ea:d4:25:44:
97:3a:0a:2b:25:da:78:93:1a:22:cd:ad:01:86:3b:8e:04:21:
9c:5b:76:be:e4:91:92:58:4d:78:ac:3a:c5:dc:c3:02:a3:59:
d2:0c:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:53 2025 by rpki-client