Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/4ee7eb22-0e63-30c8-a4f4-64d188b70e78.roa
File: 4ee7eb22-0e63-30c8-a4f4-64d188b70e78.roa (raw, json)
Hash identifier: IuqFeLOQkqRfECY3fnG4oTZi2gIqiZNfr4sR+6zpESw=
Subject key identifier: A2:88:41:17:5E:B7:F0:AC:33:14:99:A5:95:2D:6C:9F:23:2E:8E:DA
Certificate issuer: /CN=a32aa006-ef22-4905-8c82-2651c19859b9
Certificate serial: 010D0C9F43285848811B0DF75E937ADB2B694780
Authority key identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/4ee7eb22-0e63-30c8-a4f4-64d188b70e78.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 19350
IP address blocks: 199.212.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:0d:f7:5e:93:7a:db:2b:69:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32aa006-ef22-4905-8c82-2651c19859b9
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=72d84f24-2c98-4a30-9e1f-b2a73e614b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:53:54:79:f9:dd:95:b6:cf:53:75:c2:40:
71:0f:06:5d:7b:48:fe:1a:21:30:18:d4:14:e1:be:
c8:48:43:54:e1:13:ca:3f:ca:a5:99:81:5b:2c:da:
c7:ab:50:9e:c3:c5:53:87:2d:81:df:ac:dc:2b:52:
77:23:0a:f2:97:23:ba:3f:a0:88:49:8a:4c:d5:dd:
31:b5:71:1d:5d:b4:27:47:73:60:92:60:67:ef:50:
5c:fb:9c:55:db:fe:94:c6:fe:b9:d8:c2:37:cf:c9:
71:19:5d:d9:be:24:69:dd:6a:33:85:a0:89:1e:ed:
33:8c:20:13:79:30:24:0a:5c:9a:2c:75:1c:54:99:
98:dc:b3:7a:84:2d:a9:8b:48:32:e9:d7:47:a9:4d:
e1:3f:df:d3:17:ae:77:30:f8:07:24:62:6d:bf:f9:
f2:65:ee:cf:2a:5f:4f:de:6a:dc:93:49:11:bd:a2:
26:7d:55:3b:97:d1:5e:02:f9:57:65:60:a5:a3:4f:
39:a3:68:37:21:59:9d:3e:83:b0:49:af:b0:d9:81:
f9:2a:5e:52:5b:ff:a0:3e:5c:e5:bd:ef:ed:28:c4:
a1:c9:ee:42:a2:44:8d:67:a3:c6:44:b0:ef:1a:9a:
05:fd:30:6e:ff:78:fb:30:d5:b0:e6:23:26:e2:b7:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:88:41:17:5E:B7:F0:AC:33:14:99:A5:95:2D:6C:9F:23:2E:8E:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/4ee7eb22-0e63-30c8-a4f4-64d188b70e78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl
X509v3 Authority Key Identifier:
keyid:1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:6b:3a:da:41:bb:d3:08:95:2e:04:d6:3a:aa:16:8e:49:ef:
dd:70:77:f3:ef:81:82:90:b5:dd:1b:aa:7c:8a:62:30:b4:40:
2f:ee:4a:fa:84:b7:c7:ea:d6:1d:da:07:2f:cd:1d:38:6c:ef:
95:4a:cd:50:a9:a4:43:2d:5b:9a:24:43:93:74:6b:0d:0d:39:
5d:2f:56:d4:85:13:ae:b4:82:c1:42:cb:8d:c8:ff:ca:7f:f1:
ba:b5:82:f7:32:0e:67:f6:b2:40:77:21:6c:8f:c3:d3:a8:18:
60:2c:e9:5c:ed:dc:e9:69:ff:c6:e1:8c:f2:04:f1:91:2e:a5:
83:2e:36:c2:a4:c4:21:f5:06:24:cd:02:26:55:27:c3:ea:a5:
56:9c:d9:0a:c7:66:e8:78:17:2a:a0:84:f6:67:18:7f:42:eb:
4b:fb:4e:40:63:44:6b:62:cf:7a:68:35:cf:00:de:53:01:4f:
b9:0e:53:a6:ea:29:10:a8:df:ef:85:c2:00:96:34:54:72:61:
02:1f:72:22:7b:82:9b:42:d5:5c:11:f5:3b:40:39:5b:37:a7:
16:65:72:30:80:65:73:8b:3d:0d:d8:a0:b9:7b:e8:fc:9f:b9:
6b:f8:17:53:73:6c:82:e4:48:95:2f:2f:46:bb:1a:2d:16:dc:
c4:56:ae:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:22:21 2025 by rpki-client