Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa
File: c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa (raw, json)
Hash identifier: idJbL8am7wpg+g40kp0JseLQkzPGgH7nHENxl0+31Fo=
Subject key identifier: BB:28:2D:68:A5:18:F5:9A:7E:E7:74:08:DC:59:A1:F7:B1:50:15:08
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F43285848C6E62E4A9EA390DB7B197580
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 3356
IP address blocks: 199.0.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:2e:4a:9e:a3:90:db:7b:19:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=829f663a-643d-4249-ba83-913ad14038f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:fd:77:af:16:8c:47:85:f4:ee:51:63:64:
85:1d:d4:bb:8d:f1:2a:95:aa:24:3c:21:a1:5a:e5:
7d:5f:fc:cd:08:27:c1:1d:8f:e5:52:07:61:34:8a:
6f:5c:50:06:91:9e:94:58:1c:2f:3f:a2:5b:79:2a:
93:50:55:10:ff:f2:35:97:c1:f2:aa:50:a5:8c:82:
10:32:12:ca:9a:01:92:3e:38:cf:b2:32:e2:5a:b2:
c4:52:6f:e1:e5:57:41:2d:67:c7:4d:9a:c2:74:38:
95:42:14:9d:3d:41:a6:12:b8:04:6c:c3:c3:1e:e3:
18:ee:cd:78:e0:39:9b:55:1f:4c:6f:19:8a:1c:54:
37:80:0b:23:ef:bb:8d:f5:d2:8f:8f:81:dc:a3:73:
08:0e:f4:36:dd:c1:67:ab:e6:a5:85:74:92:4a:40:
74:4c:66:e8:31:79:91:c9:f7:f7:a2:bc:66:9c:95:
78:d9:a1:c9:3a:1a:09:b1:c0:24:43:1d:c3:66:8a:
9b:3a:5b:be:d8:83:12:04:b5:b8:9d:28:fc:1e:fd:
5b:70:5f:bd:76:59:27:36:f9:33:d9:3c:01:36:ce:
df:f0:dd:b4:d2:8f:d3:0a:6e:ea:78:6f:f2:c4:69:
75:ed:9b:0d:85:83:e0:3c:f9:29:c9:17:0c:2d:a1:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:28:2D:68:A5:18:F5:9A:7E:E7:74:08:DC:59:A1:F7:B1:50:15:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.0.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:88:d2:5b:52:bd:a9:59:4d:56:a3:2b:83:fb:a9:40:e0:20:
c9:73:de:4c:77:91:f8:bf:11:7b:46:b8:f0:e1:e0:15:6a:68:
b4:ac:de:88:e4:09:59:35:23:21:d5:4f:4c:16:48:38:43:60:
25:96:34:2b:f8:c0:88:d1:30:14:bb:d0:73:c6:58:bd:00:54:
8e:8e:1a:9b:cd:a5:17:bb:6b:47:d0:fe:32:22:48:ed:83:59:
56:9e:f0:14:c1:41:cc:1c:60:a7:90:44:3a:a1:e1:08:11:6f:
7e:4a:d7:fe:8d:15:30:2b:1c:40:ef:11:58:78:96:d1:e9:10:
8f:08:c7:53:d4:06:5f:04:2f:88:40:af:0e:56:23:21:01:09:
a2:87:24:8e:35:e1:e0:0d:7a:72:12:02:53:d8:c7:08:a2:33:
fb:ae:2e:9a:9b:d9:5b:e6:0f:58:8d:dc:cc:02:01:3f:ea:de:
71:ee:48:e8:ac:95:bc:c2:6b:03:88:42:b0:ef:6e:f1:2e:b6:
40:e4:ea:0d:80:4d:c9:5b:a9:25:93:63:7f:ca:26:b0:5f:b9:
0d:01:1c:79:6c:6c:0b:c2:db:81:e0:65:d4:22:cc:a8:18:44:
ab:84:44:e7:a1:ba:7f:2a:c2:99:d8:10:86:36:82:af:e3:57:
78:52:4e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:05 2025 by rpki-client