Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/a7fbd760-6ed0-3731-864b-962a37a9d75f.roa
File: a7fbd760-6ed0-3731-864b-962a37a9d75f.roa (raw, json)
Hash identifier: KCl9DWsxscudCdObJoWJV23ZVsn5FJkWTCFFdqdfXvs=
Subject key identifier: 9F:E2:01:EE:61:15:C1:09:51:51:93:4B:1A:D5:5A:AC:13:28:BD:18
Certificate issuer: /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial: 010D0C9F43285848B78B81AE5A9338ADF61BE7C0
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/a7fbd760-6ed0-3731-864b-962a37a9d75f.roa
Signing time: Thu 30 Jan 2025 14:00:51 +0000
ROA not before: Thu 30 Jan 2025 14:00:51 +0000
ROA not after: Wed 30 Apr 2025 13:00:51 +0000
asID: 0
IP address blocks: 199.88.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:8b:81:ae:5a:93:38:ad:f6:1b:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Validity
Not Before: Jan 30 14:00:51 2025 GMT
Not After : Apr 30 13:00:51 2025 GMT
Subject: CN=80e90b50-bebb-4173-a4e3-f2a8796a57b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fc:e1:59:89:7d:52:5f:64:8c:82:5d:6b:75:
c1:24:cb:ae:87:04:54:dc:17:ae:b5:93:e1:a0:86:
a7:25:f3:84:ee:f5:46:f6:82:e4:28:10:c0:8b:72:
5f:49:ab:1a:5a:b0:da:c0:e8:69:2b:c1:7a:01:da:
6d:dd:32:e4:54:3e:b3:4b:f3:eb:74:cd:c7:60:2e:
69:81:16:c1:27:26:3c:dd:70:c6:19:1d:2e:28:5f:
b9:51:e7:21:b6:60:03:94:89:98:26:a6:e1:dc:2d:
76:c6:00:81:24:83:99:ad:a1:27:39:5b:c5:62:57:
d3:e1:2a:32:37:64:71:ce:ef:88:bd:7a:39:14:d1:
ea:1e:21:fc:8c:af:19:b1:27:4e:95:c8:ff:94:e4:
9a:3e:d3:a7:04:3d:3e:3c:49:8f:c7:f4:dd:3e:61:
f3:6f:8b:e8:ee:d9:d7:01:a0:d6:f1:b8:62:55:56:
3d:61:0c:42:81:c9:e3:7a:2a:ed:88:f5:ca:c7:fa:
3c:c0:21:47:d6:4a:4f:09:c8:f5:e0:f6:b9:c3:0a:
1c:ba:8c:09:b7:b1:ca:ba:f1:8f:bf:fd:38:39:cd:
4d:f8:bb:8e:19:20:b3:3d:09:7b:24:32:0d:5c:20:
ce:75:ef:aa:ce:54:78:d1:a5:93:3a:bd:81:97:93:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:01:EE:61:15:C1:09:51:51:93:4B:1A:D5:5A:AC:13:28:BD:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/a7fbd760-6ed0-3731-864b-962a37a9d75f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
X509v3 Authority Key Identifier:
keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.88.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:02:5d:d6:fb:15:91:8e:98:b7:43:87:2f:63:86:19:ce:7b:
a0:57:af:7c:48:e7:c3:0b:d8:86:4b:ab:75:ce:2d:8c:37:80:
04:ba:d1:0b:33:9a:b2:87:1b:10:2b:77:27:2d:e0:a6:fc:3a:
ae:ba:e5:0b:36:bb:12:d4:a1:2b:3e:38:4c:c4:75:16:6d:60:
c5:03:02:58:6a:e9:3d:e4:fa:0c:85:0e:6e:5d:ce:d1:33:48:
54:bd:58:9a:aa:59:86:c3:58:5b:a2:0d:68:f2:5e:33:af:eb:
13:f0:91:05:4d:a0:b0:79:86:07:d3:77:db:75:aa:32:eb:d5:
64:c4:b2:b8:49:93:2b:71:a6:a8:23:6b:8e:9b:5a:84:c0:a4:
5d:a1:22:7e:21:a1:a5:da:72:cd:59:5c:cf:f1:69:5a:e4:7a:
f0:ac:e4:12:d9:df:5d:0d:e5:01:f4:b7:99:84:38:d9:a3:42:
2f:f1:38:f2:88:65:ec:0c:df:71:70:d3:1d:57:a2:58:c2:ae:
d6:89:cb:d3:c4:be:93:72:52:82:e9:e8:37:fe:bc:ee:4d:80:
66:b8:e2:49:62:a0:9a:5b:bc:d4:3f:37:e4:72:52:4c:a3:a5:
12:cb:4d:4b:16:3a:b2:61:0a:16:b5:af:12:d0:37:4c:aa:3b:
6e:fa:46:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:53 2025 by rpki-client