Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa
File: 208a5d2f-5933-32e5-aaaa-898bcac06735.roa (raw, json)
Hash identifier: q2DK5aSe140mLme/05IFmDdOVrkM6G+qyeMPSvrjT6g=
Subject key identifier: F3:1F:67:73:86:32:7E:64:A9:72:F4:DA:DE:84:7A:A2:B3:5C:D6:1F
Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial: 010D0C9F4328584937D93AD6D9EA69BAF84C79C0
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 30045
IP address blocks: 199.212.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3a:d6:d9:ea:69:ba:f8:4c:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=b42218ac-b624-40a5-9bef-ddbec526adce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:d2:be:86:74:6a:23:6f:85:2c:0e:c1:74:
e0:ee:ee:78:04:d1:75:e5:cf:e5:90:ea:84:a8:4b:
5b:14:38:8e:50:8f:2a:25:c2:58:50:17:c5:37:cb:
3f:84:91:9c:3c:2d:86:07:fd:df:1d:45:ab:42:d5:
40:8e:4b:97:bd:f0:e9:78:24:3e:a4:c8:fa:2c:7d:
dd:3d:74:50:98:3a:32:31:33:0f:5f:9f:1c:ad:c4:
fa:76:02:88:27:15:ec:7e:39:71:c1:63:38:81:2c:
5b:33:f7:81:fa:1e:f1:45:4f:91:9e:89:7c:db:9d:
13:41:3b:ab:6a:44:5d:98:5d:15:3e:4c:a0:6f:19:
bc:c0:71:e8:33:c8:f0:a9:ba:72:2a:21:ee:3f:78:
ea:84:8d:c3:c6:23:18:fd:13:2d:3b:59:1d:06:27:
64:d3:11:df:eb:b2:6d:7e:53:d0:29:8f:40:dc:99:
99:58:51:83:e0:f2:c8:ed:2e:51:f4:35:9b:36:44:
ae:46:3d:a8:97:10:0c:17:e7:c7:80:e5:3e:c5:92:
7f:a1:40:b2:6c:d3:1d:4c:5f:be:fa:43:9c:e8:9e:
8e:86:38:28:9a:2c:6f:de:ba:a4:70:0f:d2:ba:96:
fe:12:8a:a8:fe:73:45:ad:34:b8:87:8b:2a:d9:08:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1F:67:73:86:32:7E:64:A9:72:F4:DA:DE:84:7A:A2:B3:5C:D6:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
X509v3 Authority Key Identifier:
keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:19:02:2d:1e:cc:2c:c6:ff:f9:c9:0c:fa:a1:3b:4e:24:9c:
8d:69:f0:90:3d:12:4f:4b:f4:f9:9f:33:79:0e:fc:ed:e7:d6:
d6:7d:d5:ba:1c:10:1f:6e:60:71:5a:0a:4b:f7:52:f7:f4:ac:
3e:12:fd:83:0f:1f:7f:14:22:58:41:10:4b:77:ac:c7:01:96:
1c:2b:a3:8b:d0:71:2c:b1:4c:a0:65:0e:35:8d:9b:25:33:c9:
70:1f:7a:cc:d5:60:d3:d5:18:56:5f:04:e4:3e:4e:5e:e2:ab:
db:91:e5:08:50:42:f5:9e:45:4d:8a:35:dc:6b:47:68:55:62:
97:54:27:cc:8e:d2:8d:78:8b:6c:da:de:61:0a:5d:27:83:ea:
2e:2f:1e:8d:98:07:6f:d8:90:1b:11:41:90:b6:0e:4d:a3:69:
77:9d:75:57:b0:69:7b:98:0a:18:c8:98:3b:27:a3:d1:be:b0:
3a:9c:5e:f2:19:a4:39:81:17:ba:db:60:ea:04:19:c3:96:97:
9f:1c:f3:2e:1e:b2:12:27:fc:ff:f7:66:51:75:1d:6a:8a:08:
96:f6:38:30:5a:32:82:12:94:0f:08:84:a7:87:af:70:aa:bd:
03:97:be:ea:60:f9:3f:4c:d5:08:5a:68:43:0d:ab:b0:ae:76:
8e:bc:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:34 2025 by rpki-client