Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa
File: c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa (raw, json)
Hash identifier: afxRkPL7gIdEH8coCF3JQM0sFDaOfSmEchhFjwuzjSY=
Subject key identifier: AA:3B:0E:3D:41:2F:04:57:7C:52:FF:53:04:47:4F:1A:EC:A6:36:A2
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44C7471A1BD6B253D28C0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 199.102.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4c:74:71:a1:bd:6b:25:3d:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=e6859647-4731-4df0-8f91-fb78f5386f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:d5:f5:ac:f2:c5:63:3d:6e:cd:72:59:c3:
d6:8a:11:eb:18:64:98:ad:6e:bc:40:ac:98:46:40:
80:d8:7d:f9:b1:47:8c:1c:9b:72:0a:87:f7:0e:11:
6b:87:a0:3b:92:80:cf:d1:00:73:b8:61:92:e4:6d:
57:c6:fd:9b:f5:76:7e:78:2f:97:44:e0:2e:f0:2c:
42:e3:ac:ae:05:90:bb:50:64:eb:0c:af:80:47:91:
ae:59:d9:59:ab:6d:60:36:a4:6b:32:d8:47:e1:66:
00:d1:31:f9:01:81:96:44:08:ef:dd:05:5a:8d:45:
24:17:5b:33:7d:3e:a7:bc:8d:d4:00:ab:bc:9e:a2:
85:74:83:41:c5:ef:a0:ab:c7:e0:a1:e7:59:4b:f2:
b6:08:51:08:50:14:c5:c2:ed:c5:13:75:f0:63:6e:
59:e7:df:bd:94:37:e9:63:8f:6c:22:7c:c7:43:76:
40:34:5f:92:5c:1e:88:e2:0c:ed:b9:3f:ef:58:25:
43:d1:e2:5d:91:e9:33:05:43:f2:41:59:a4:8b:7d:
82:bc:6a:aa:d4:21:60:de:07:0f:b8:04:23:b5:b6:
68:7a:9f:db:88:f3:ad:88:c4:90:65:34:d4:e1:86:
81:ee:06:2b:ae:36:72:2c:d2:fa:e2:07:6d:8e:f4:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:0E:3D:41:2F:04:57:7C:52:FF:53:04:47:4F:1A:EC:A6:36:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.102.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:8b:15:0d:e0:63:3b:6b:4f:dc:af:80:c8:d2:8c:ee:51:31:
42:f5:2a:0b:59:f8:af:dd:00:ce:48:0a:f1:f9:4d:1b:af:64:
cb:b6:2e:06:96:92:6a:a2:00:04:ed:08:01:dc:ba:ba:62:3c:
da:ec:21:98:32:39:32:e5:4b:2d:58:7e:3e:9b:87:c0:40:a9:
c4:63:f6:30:7f:1b:f0:ba:fd:89:e2:16:6c:87:a0:94:9f:d1:
06:1a:cf:a8:a4:50:60:16:7b:6e:09:2c:cf:f4:66:fb:c8:f3:
68:f1:85:d1:5c:7e:c3:0f:f4:df:04:52:2e:0e:7c:61:70:46:
23:50:b5:b6:e5:40:66:37:61:c4:5e:d8:2b:9e:7a:24:cd:9b:
ca:b6:16:76:d7:ed:aa:be:32:95:11:5a:c6:ad:e6:52:09:f6:
3d:cb:5e:48:fb:9e:b2:b1:b2:43:5e:86:20:98:61:cf:a0:15:
c1:6c:41:d6:47:0c:da:cf:12:0c:7c:5c:20:ff:71:a6:8e:4f:
2a:ca:a8:aa:18:b3:23:54:74:0c:f5:f8:78:82:d3:fb:76:80:
be:b3:26:c5:69:39:a9:e4:72:0b:3b:54:f7:45:c8:ae:d2:5c:
8f:57:3b:ce:a0:83:ab:8f:05:c5:67:f8:7e:47:8f:a3:fb:62:
ad:6e:20:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:27 2025 by rpki-client