Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
File: 51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa (raw, json)
Hash identifier: iicpRdthfO1Dn72TFuKibk1BqF1YNCygwYr0M8A6pNI=
Subject key identifier: 9B:AE:0F:11:2B:3B:3C:6E:DA:93:23:2F:74:AE:4A:04:F0:19:AA:5B
Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial: 010D0C9F432858487FB5E4B82C77E0FDB9A50AD8
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 11325
IP address blocks: 172.85.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e4:b8:2c:77:e0:fd:b9:a5:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=00aa1c49-284a-44f8-9e82-5f76f5910556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:e2:1c:f8:b4:c7:61:88:a1:95:49:9d:f9:
6f:ee:41:d4:71:de:1a:39:68:a5:63:9f:19:94:64:
73:23:51:18:b4:ff:7c:e5:cf:03:52:71:79:bc:ef:
25:bf:24:f4:3f:29:c0:01:7d:a2:7b:2f:21:03:8d:
e0:fa:e0:b7:9f:0b:62:ef:e2:74:0f:d5:4d:77:fc:
b9:21:ad:c4:88:3d:d3:16:e6:07:b8:65:15:1e:14:
3e:23:26:8e:f0:a7:a1:b9:b8:04:0a:49:cb:0d:a1:
86:91:48:21:cc:7b:11:b1:9c:ff:44:76:bd:b4:02:
2a:8d:dd:62:18:3d:8c:5c:c6:d0:57:38:9e:87:16:
e9:1f:77:a5:44:28:52:9c:32:c3:71:c9:91:89:6d:
33:f5:87:31:16:d7:1c:eb:f2:8d:73:c9:3c:fa:58:
63:28:c1:df:5e:18:07:d8:0c:b7:fa:0a:91:75:a4:
ab:c2:df:2e:46:8e:76:c6:61:56:92:0c:8b:10:34:
59:1d:83:a9:bc:2b:b3:1f:14:25:71:28:0d:e3:92:
e8:cc:1b:0b:61:41:f5:0e:97:61:34:ee:a0:a0:1d:
f2:74:d1:59:b4:e5:b3:54:6e:62:ed:8a:71:af:d7:
81:7c:70:69:51:d3:1c:19:c1:a1:67:1f:42:41:4d:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AE:0F:11:2B:3B:3C:6E:DA:93:23:2F:74:AE:4A:04:F0:19:AA:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
X509v3 Authority Key Identifier:
keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.85.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ad:38:7a:3d:67:b7:82:9e:04:37:55:c7:66:d3:90:fe:4d:
16:2e:4f:42:26:9a:bf:d1:37:11:4d:0c:79:c3:b4:7c:f7:96:
58:6c:31:de:b5:bb:b1:67:33:ef:b9:c4:37:c6:24:d8:db:9b:
74:b7:ac:a3:e1:ff:18:77:5c:95:08:52:00:7e:16:a7:64:8e:
be:7b:00:4e:6a:12:6a:27:90:5f:8f:0d:d9:f4:b2:c6:51:c0:
fa:3d:09:ab:ab:2c:ee:22:15:86:1a:41:90:6d:3f:0c:6f:eb:
f9:fb:bf:2f:d4:53:2e:02:3e:f5:a0:12:cc:44:c4:49:d4:99:
dd:a4:8b:1b:ec:96:8a:0f:5d:d6:b8:98:14:f7:f9:46:ec:56:
82:9b:0c:bf:f6:ac:b9:36:35:bc:60:ef:fb:a0:29:52:f8:af:
25:94:99:64:5e:77:54:41:ba:8f:82:2d:84:6c:aa:40:ea:7d:
cf:39:99:4b:16:8f:b2:0f:a5:ba:08:6f:f5:16:3f:cc:2c:61:
ec:f4:7d:db:48:65:8e:97:b4:c1:2f:45:3d:b1:3d:6b:44:a4:
95:82:61:3d:ec:17:52:ce:46:27:04:89:32:6e:9a:83:a3:01:
da:97:65:03:e2:35:3c:54:e1:07:0a:39:00:40:ae:1b:4b:7e:
8b:29:1d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:26 2025 by rpki-client