Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/96fbfd76-7b57-3c9a-9f90-d034f887fbf2.roa
File: 96fbfd76-7b57-3c9a-9f90-d034f887fbf2.roa (raw, json)
Hash identifier: UeP+31CYeSilmqeD9uUfO7wdY8f6dPYRqwaFqum/mos=
Subject key identifier: 0D:F9:93:CD:FD:B1:9E:3D:98:28:CF:E6:6D:86:60:05:80:1D:98:99
Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial: 010D0C9F43285848B8F0C645B1EDD859F7E9FE00
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/96fbfd76-7b57-3c9a-9f90-d034f887fbf2.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 198949
IP address blocks: 199.64.75.0/24 maxlen: 24
199.64.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:c6:45:b1:ed:d8:59:f7:e9:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=006e66db-d1e7-4f5e-ba86-394d38c63125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:09:10:66:3d:de:77:49:06:36:cd:01:8c:
c7:52:f7:91:b6:8a:40:82:9d:61:75:44:aa:e7:5e:
30:a5:0d:fb:0d:48:b6:0f:3f:0a:35:25:1e:c8:5e:
1f:a3:1a:f1:d1:f0:28:f1:0f:7c:de:a0:6b:8a:10:
b4:23:bc:fa:cb:f7:4e:5c:63:10:7e:0b:ed:03:47:
80:dd:44:a4:30:a3:35:81:56:8e:31:c3:23:95:6f:
80:b0:93:28:cd:87:ca:15:7f:6e:cb:5f:7a:81:de:
1d:a4:a3:e1:8c:b5:a8:a8:27:b6:ac:65:97:b7:90:
5a:e8:a7:38:20:5a:78:c7:9b:4d:d0:fe:72:3c:05:
29:1a:e1:6e:12:b6:29:5c:bc:1f:be:6b:fd:ee:18:
a8:bf:d9:9c:38:de:f9:5e:0d:0a:45:90:38:1d:a6:
0d:1d:07:3c:cc:4a:e2:5c:5f:9b:6a:11:b8:24:d1:
53:24:fb:5a:e9:2e:6a:ac:50:71:06:64:98:2d:b5:
e3:9c:bc:cb:9e:3c:30:c9:f5:42:ab:da:d4:e5:c8:
56:3d:10:90:46:f6:f5:8a:0b:c1:06:e5:be:26:17:
f6:64:bd:9b:f9:d1:12:d9:b8:ea:b9:40:c3:70:8a:
b1:41:05:9a:a8:cf:6e:5c:ef:8c:16:bf:9f:2b:39:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:93:CD:FD:B1:9E:3D:98:28:CF:E6:6D:86:60:05:80:1D:98:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/96fbfd76-7b57-3c9a-9f90-d034f887fbf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
X509v3 Authority Key Identifier:
keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.64.75.0/24
199.64.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:6f:c6:e0:3d:cf:ea:63:d4:ec:fc:e9:2d:82:0a:98:5c:61:
af:62:fa:9e:42:ba:82:ff:33:69:27:ed:f5:06:a9:8f:ef:60:
5b:4b:b9:00:4f:2e:43:9f:0f:8f:f9:12:4a:e1:c4:2b:2c:eb:
fc:a5:18:ae:de:b3:6c:5d:87:df:83:49:46:15:69:91:da:87:
b1:73:f3:df:ac:0c:9c:a5:39:fe:df:0f:b0:6e:ba:aa:c7:db:
b0:a2:a5:8c:ae:ac:20:0f:db:58:12:cf:a7:24:03:3f:73:9e:
40:1f:93:0f:56:dc:d4:5e:05:07:90:11:2a:a2:b8:c9:3d:19:
ff:80:91:ea:c3:4e:f7:5c:5c:ee:07:b1:a2:f6:34:c6:95:01:
e6:0a:d1:88:cf:24:b0:ae:0d:31:e6:7a:c6:f3:d8:45:a8:2f:
59:a0:5c:ae:ea:ec:6a:fc:db:0b:25:5f:85:d6:a9:f9:96:a4:
cc:b9:2d:22:fd:93:13:a3:6a:eb:73:b2:f8:9d:45:95:82:1e:
08:39:c4:f3:5b:bd:c8:96:90:93:fb:ed:03:63:12:8a:a2:7b:
9e:2d:10:e4:34:13:46:18:bb:86:26:cc:74:45:b3:b8:90:3d:
8c:66:b5:b7:e9:23:19:66:78:d9:35:53:e4:25:bd:3a:fd:e9:
3f:a4:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:43 2025 by rpki-client