Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f2c27079-443d-3f29-883c-48192a3252fa.roa
File: f2c27079-443d-3f29-883c-48192a3252fa.roa (raw, json)
Hash identifier: DAwwL+AXtBf90R0mQTM6avleHt0dr0vHL8lnXzpHlX0=
Subject key identifier: BE:32:A3:0C:59:A2:D0:EA:7D:67:F2:C3:0D:F1:48:E5:1A:05:44:37
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F4328584902EC141F9F117E7BE454F800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f2c27079-443d-3f29-883c-48192a3252fa.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 6461
IP address blocks: 199.96.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:14:1f:9f:11:7e:7b:e4:54:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=07c424c7-91e5-446c-9a7a-769512c47845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:11:6c:f6:ca:f5:13:68:87:f3:fb:d9:5e:
88:4b:5a:01:d2:98:df:eb:a4:f3:36:d1:e0:db:88:
b0:e1:19:55:e5:46:64:b9:df:1e:3b:cf:51:0e:24:
ea:4f:0d:cb:88:0c:78:52:25:e4:8c:44:87:13:1f:
2e:0a:be:30:04:cd:8e:00:d0:e0:3d:7d:89:a9:24:
4f:d1:46:96:43:ee:a9:45:46:c8:8b:b9:e0:63:0f:
c9:b9:9e:61:e4:f0:d7:50:f8:40:59:c4:ab:2e:76:
9c:5b:e4:62:ae:c9:54:56:a7:59:10:ab:25:db:b9:
83:bc:b6:78:60:8c:0a:4f:60:50:e8:84:e0:ab:48:
92:9c:18:7c:8d:39:b2:f8:4a:e9:7f:90:cf:0c:1e:
97:b6:5e:ac:6a:66:11:31:59:c9:3a:dc:6a:56:dd:
7f:f6:99:46:c2:0b:90:99:ca:b1:0e:d2:e9:8a:f4:
b5:cf:b9:65:59:c9:24:65:e4:a5:ca:a5:9f:b8:b8:
16:80:06:26:3c:5a:ba:fd:03:cd:35:9d:fc:74:7b:
d0:68:87:e9:0f:db:fc:86:bb:19:cd:e3:1e:83:de:
2d:bf:10:6c:ac:d1:09:ad:87:d4:0f:71:48:85:b2:
b4:01:5c:7c:c0:10:b5:b2:b9:2f:72:c7:ca:f0:45:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:32:A3:0C:59:A2:D0:EA:7D:67:F2:C3:0D:F1:48:E5:1A:05:44:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f2c27079-443d-3f29-883c-48192a3252fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:64:97:91:30:7c:33:8c:a4:cc:f1:31:9d:78:e3:c7:d7:c7:
a4:c9:40:35:c0:dc:65:e0:8f:5e:46:15:65:e1:13:64:cd:78:
de:11:06:6e:05:a0:22:2e:ec:ac:48:69:6f:42:a8:f5:06:8c:
0f:e2:a6:94:df:88:d6:43:d9:22:a1:c2:4c:d6:cf:ad:ba:46:
32:42:7a:67:20:a8:11:86:a8:d4:14:50:32:e7:c9:16:ae:11:
d4:cc:2e:84:46:bb:23:e2:08:c6:18:40:c3:d7:f3:89:47:ff:
b5:15:49:b6:3a:e1:d9:5e:31:5b:ec:02:96:da:ff:87:7b:b6:
6b:2c:b2:ff:8b:7a:f6:10:b0:64:4d:09:48:de:72:e1:bb:e7:
00:6f:ec:90:3a:c3:44:f4:5b:4c:1b:45:38:a1:e5:c8:d9:3a:
f5:aa:fc:aa:72:18:af:67:b9:2a:d9:29:33:f1:01:ad:07:ff:
57:fa:04:c4:5f:66:21:38:9e:36:b1:a4:4b:8f:bd:f7:65:06:
f4:a5:ef:f7:75:ba:da:33:ab:cd:c3:b5:06:ca:a4:85:23:de:
1a:bb:30:58:60:3e:a0:ce:04:8a:ea:25:47:3d:2d:b2:19:4e:
e5:43:21:ee:45:bc:03:7c:d2:95:1c:4c:da:2b:49:11:40:c6:
34:8d:10:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:22 2025 by rpki-client