Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa
File: fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa (raw, json)
Hash identifier: s4FQGH0LIU9mtrTcb9CBgv+KtJqld6NFkE0YDsPMP2o=
Subject key identifier: 84:74:9C:4D:E2:E5:37:94:06:E9:AE:C0:05:03:79:0A:14:F2:18:87
Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial: 010D0C9F43285849088172C620B7BC165AC5A400
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 53991
IP address blocks: 199.193.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:72:c6:20:b7:bc:16:5a:c5:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=0a1f34b6-89d5-47f0-a7f0-69177948e4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:21:5a:7c:01:6d:28:c4:24:5c:29:49:6f:
38:63:db:62:42:72:5e:68:61:52:13:ed:9b:40:e2:
89:45:7a:b2:dc:49:dc:4c:13:98:27:4e:6e:40:ea:
eb:ae:40:1d:0f:f4:9f:f0:bd:10:01:66:7c:4c:7e:
a2:57:43:6b:66:e8:c8:18:0f:8b:5e:00:9b:e0:52:
26:f7:c3:d9:22:58:ef:fa:aa:72:c1:68:53:38:4c:
9c:04:65:f5:28:0a:f0:b5:7b:86:41:29:62:29:46:
58:bb:b6:0e:c9:f7:f5:11:d7:14:24:26:d2:4f:f9:
71:1a:23:31:0a:86:30:86:42:b5:0c:cd:3d:3a:80:
11:08:05:34:70:d7:49:9c:30:c9:91:8d:c3:7d:67:
0d:d7:3b:a1:38:24:d7:c4:e7:10:da:c4:e0:3a:66:
49:e1:64:a8:bc:e3:11:af:13:7f:51:ef:c9:5f:b5:
70:6e:21:44:fd:12:eb:e9:50:ba:be:f4:6b:fa:29:
e4:4b:3a:b2:e3:bf:80:82:5c:4d:33:c7:c0:a2:bb:
87:17:02:2f:9a:97:22:2c:75:2a:73:3f:74:d6:80:
d9:8e:b8:0a:f6:54:7f:28:cd:cc:f1:b4:40:ae:9b:
a7:1d:dd:6f:ae:95:c6:f0:74:2e:85:be:95:02:46:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:74:9C:4D:E2:E5:37:94:06:E9:AE:C0:05:03:79:0A:14:F2:18:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
X509v3 Authority Key Identifier:
keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.193.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:da:0e:7c:f2:35:53:14:10:53:67:6d:d1:60:f7:5e:bf:55:
f4:b7:15:3a:68:cd:32:71:6d:6c:19:77:4d:98:4f:12:83:92:
5a:17:31:a1:d1:10:d2:85:17:1e:a8:e9:1b:3d:40:a5:d6:f5:
06:9f:01:05:da:d5:1c:61:36:76:07:ef:84:c6:9f:68:5f:89:
d9:61:f0:eb:ce:52:5b:3c:3e:40:fb:7a:ea:ca:55:48:f2:67:
f5:10:1c:cf:b5:45:5b:30:15:ae:4b:4c:ee:e2:ba:c1:44:8e:
89:a4:56:62:16:5e:90:7b:de:9c:49:72:21:66:a2:bd:e7:73:
d9:13:51:97:ce:d3:e7:ca:3f:29:1f:ae:3a:a7:d1:19:ed:c6:
30:45:9f:d3:8d:98:61:d7:9e:0c:1e:0f:94:8b:f5:46:0a:2f:
29:43:ae:21:27:f7:19:b9:82:12:38:bd:c0:e6:e9:e8:4d:3c:
8e:ba:f9:58:16:e7:f2:ad:a5:60:2a:d3:67:d2:c2:6b:98:94:
32:a6:09:19:a5:f1:a2:46:8b:30:5a:6c:0e:4c:73:df:29:78:
5e:fb:db:3d:d8:cd:bd:31:fd:5c:70:b2:e3:e7:e5:fa:5a:0e:
04:71:b4:19:29:b5:e2:66:62:67:5c:63:b5:d6:aa:23:9c:30:
64:54:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:25 2025 by rpki-client