Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa
File: 68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa (raw, json)
Hash identifier: bMGYJhxsMxMTpoyCaKeomTJ1a5diBBJ1x32zleDtvoA=
Subject key identifier: 11:1D:32:75:46:09:43:30:63:ED:48:13:3B:36:AF:77:36:E7:E8:DE
Certificate issuer: /CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Certificate serial: 010D0C9F43285848CC7B95C1578BEA178D458880
Authority key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 20101
IP address blocks: 199.192.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:95:c1:57:8b:ea:17:8d:45:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=8495278b-8cca-481e-93bd-e36e63001279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:4e:90:86:77:04:13:ce:24:9a:3f:0d:71:
66:27:29:6f:a0:f0:e5:16:c4:12:4d:10:6c:ad:0d:
b6:e4:23:46:8c:65:a3:80:0e:82:c8:1b:3b:bf:8c:
57:c7:82:03:9c:72:c1:3a:7a:f9:d6:8e:d3:93:07:
aa:27:7c:7c:fb:d4:66:34:94:28:a3:c9:21:94:e4:
27:c3:d5:08:9b:e3:41:82:02:d2:b2:be:cc:a5:8b:
03:34:67:1b:48:ba:e4:9c:92:fd:8e:05:6a:61:37:
50:8b:5e:7c:e0:72:de:4f:19:15:42:7a:29:92:6d:
71:bd:d0:d6:4c:d6:c8:ee:fb:ae:c5:3e:53:38:73:
7b:94:cf:33:95:e3:0f:79:6a:d6:ad:90:76:48:5c:
e3:6b:37:08:46:f5:42:f9:7f:82:0a:2a:8b:df:a5:
ea:67:1e:2a:21:2c:f7:fd:cf:ec:0a:93:35:fb:cf:
ce:c2:b8:68:f6:ce:5b:dc:e3:a0:44:3c:3b:db:7f:
3c:2c:b0:23:dd:2e:4f:51:62:32:56:2a:91:2f:68:
30:97:49:f9:72:f2:1d:10:fd:95:61:ae:08:36:d0:
7d:ac:78:8a:95:91:31:f5:10:2b:07:3b:90:4a:48:
0b:59:25:e8:cc:d3:bf:d7:60:39:57:00:2c:c5:7b:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1D:32:75:46:09:43:30:63:ED:48:13:3B:36:AF:77:36:E7:E8:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl
X509v3 Authority Key Identifier:
keyid:70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.192.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:dd:9c:6c:a7:f5:b0:5d:3c:b0:67:07:5e:cb:c0:f9:2f:cd:
0b:dd:43:27:f0:c5:9c:6e:b2:2a:da:84:c1:8c:fb:fa:19:02:
2f:25:f6:75:81:ce:d1:34:2e:95:5a:64:a9:41:49:22:bf:2b:
35:04:a2:fd:20:6a:99:15:83:cf:a2:55:bf:73:1c:b9:c4:71:
f2:c1:e2:c1:70:c8:d9:dd:05:f9:92:01:23:be:3a:79:7a:89:
8c:68:93:39:f3:c2:c8:2c:95:fe:2e:89:af:ee:ce:eb:9d:0f:
69:bd:7a:3e:2f:99:88:7b:63:7e:71:06:6f:37:94:3a:3e:6f:
10:a9:10:e0:ea:6f:73:0d:d3:90:8d:7a:a4:35:e0:88:71:d3:
f4:a8:9c:8c:b6:0a:4e:c5:7c:fd:6d:a4:c3:2d:40:6f:33:e1:
69:3a:38:ed:65:f2:a6:be:72:33:2a:ec:dd:65:49:46:cb:4b:
32:6f:70:a0:4a:a7:d8:34:09:4b:34:63:c7:8c:c7:60:0b:5d:
b9:f3:ef:0f:57:db:ff:57:e0:02:db:e6:f2:6c:48:f7:d7:cd:
cf:50:2e:38:52:12:20:b6:e7:56:0c:36:40:24:35:76:54:d0:
29:57:fd:b4:a8:85:e1:16:e5:53:75:de:86:76:9b:b6:0d:ab:
ef:26:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:28 2025 by rpki-client