Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/2cfeb2dc-8ccd-366d-861a-64c78f093e4d.roa
File: 2cfeb2dc-8ccd-366d-861a-64c78f093e4d.roa (raw, json)
Hash identifier: Y7IKQAFJKXOAtYKYiGs2jNc1I1ZnrFe5bSmXrM6/JqQ=
Subject key identifier: 59:78:CC:7A:21:8E:16:94:88:15:E6:AB:35:9E:91:15:D6:AC:29:24
Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial: 010D0C9F43285849110A9AC0A91080B4C2F9D1C0
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/2cfeb2dc-8ccd-366d-861a-64c78f093e4d.roa
Signing time: Mon 03 Mar 2025 15:23:56 +0000
ROA not before: Mon 03 Mar 2025 15:23:56 +0000
ROA not after: Sun 01 Jun 2025 14:23:56 +0000
asID: 10103
IP address blocks: 199.58.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:11:0a:9a:c0:a9:10:80:b4:c2:f9:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
Validity
Not Before: Mar 3 15:23:56 2025 GMT
Not After : Jun 1 14:23:56 2025 GMT
Subject: CN=519de08e-5481-4a72-8b62-d11474c73dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:e9:f8:41:d1:60:2b:db:24:8b:0b:5c:2f:
71:48:2b:f2:78:2d:45:63:2d:e8:a2:28:3d:55:2d:
72:cc:ea:11:1b:d2:81:91:d2:cd:7b:25:52:77:8a:
c9:97:28:96:e3:74:66:a3:76:e6:49:46:2f:71:5c:
09:3f:22:91:ef:62:5c:0d:79:ba:ff:b7:38:62:1e:
2c:f8:04:52:26:d3:a6:5b:8a:d1:ab:18:fd:ec:03:
e2:a1:09:87:b7:4b:36:20:99:ca:a5:6c:ec:b1:b7:
9a:b6:eb:5f:fc:46:5e:28:4a:c5:af:61:5e:a8:18:
ec:f0:13:5a:8b:06:01:24:b7:5b:78:b8:ae:54:1e:
49:54:e7:39:c7:03:93:f2:c5:0f:e4:63:d6:77:68:
a2:a4:f6:a6:e2:13:4c:94:a9:a9:6d:99:d6:a9:a4:
5c:7b:46:b7:82:cf:1d:eb:83:18:a5:f3:bd:70:02:
c7:c8:14:d1:19:90:49:81:c9:da:32:86:80:4a:ef:
5b:f8:2c:a1:53:b9:b3:20:9a:1e:75:60:8d:28:0d:
4e:3b:18:30:a6:34:80:0c:6d:12:ba:a5:28:74:bf:
7a:2f:65:4b:95:6f:ae:6c:7e:bf:95:51:10:aa:04:
f9:a0:3f:33:ca:5b:99:3c:12:1e:54:42:d3:a0:57:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:78:CC:7A:21:8E:16:94:88:15:E6:AB:35:9E:91:15:D6:AC:29:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/2cfeb2dc-8ccd-366d-861a-64c78f093e4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
X509v3 Authority Key Identifier:
keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:49:d9:a7:ff:3d:74:20:d8:a8:09:51:63:98:fc:68:52:7c:
be:2e:9d:d5:f3:42:42:3b:30:23:7a:bb:9a:d4:25:36:09:68:
86:b0:16:b0:4b:48:77:8e:de:92:c4:a9:de:36:f5:f6:53:e0:
b4:30:0e:02:d7:87:57:33:69:8d:86:c8:d8:7b:f8:f1:93:93:
e8:8c:f3:78:bf:96:71:e3:d2:c6:ab:51:65:73:7c:cc:0e:57:
3a:85:05:78:b9:59:93:31:92:a1:64:2f:93:3c:90:cc:c4:32:
8f:de:f7:a6:34:a8:d2:3b:52:59:9a:6c:29:80:c7:b4:91:b0:
43:f2:a8:4c:c9:51:08:2c:ed:88:72:6b:f8:c4:9f:18:69:91:
7f:af:5f:8f:b9:cc:8d:d4:a2:05:3a:0d:3e:dc:a5:0c:e8:e0:
e1:cc:a4:d3:33:eb:8c:6d:b1:d9:bb:cb:35:79:8f:49:cb:09:
c1:c9:c3:50:5a:92:4d:da:aa:89:3e:db:a3:69:ac:62:22:0b:
cd:f2:be:17:f5:02:a7:10:03:45:0d:27:70:1a:6e:d5:8a:45:
a6:45:60:dc:7a:91:9d:6a:79:97:45:be:82:c6:74:5e:f9:1b:
60:c9:fa:7b:81:12:df:ec:0b:7d:0c:7b:49:ee:7c:88:60:40:
70:1d:fd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:57 2025 by rpki-client