Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa
File: 6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa (raw, json)
Hash identifier: dqVh+/PjUQr9eagHjjr5e0mT1lCrtijnSqVRjKoLCxM=
Subject key identifier: 62:9B:A5:02:7B:57:8A:5E:E4:CD:63:13:62:D5:17:8E:B6:25:42:A6
Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial: 010D0C9F43285848E59BCDDD4CB6407D8E469F80
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 26677
IP address blocks: 199.212.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:cd:dd:4c:b6:40:7d:8e:46:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=fe8fd4c2-cf6e-49fe-802a-12f86f49e4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:68:7f:db:82:1a:c6:d0:01:99:ef:f3:a1:
1b:15:6f:53:53:b5:78:d5:cc:b9:55:78:6c:d7:0a:
be:9a:c4:89:26:6b:43:59:5e:03:4d:47:32:e0:71:
9d:d6:81:55:09:f7:45:82:11:a4:bb:68:32:a8:54:
34:82:dd:a0:66:ff:6f:c0:35:67:da:66:13:a3:34:
10:93:d9:ae:66:d0:e7:ee:b7:40:c6:f0:ae:55:4e:
b8:d1:87:77:fb:f3:3b:49:84:8d:ec:02:c2:2f:3d:
6f:0b:6b:20:7c:8f:da:26:6d:09:3c:05:21:9e:34:
04:6d:7b:56:d7:69:9a:44:8e:80:5b:d5:89:5c:ca:
a8:5d:a9:ee:4d:fa:75:0c:10:4f:0b:21:0b:22:95:
3a:4a:d8:c9:e8:88:d1:db:23:8b:5c:6b:24:1a:ce:
20:a1:a8:dc:5c:de:ed:5e:44:01:ae:c9:fb:59:de:
b7:c7:e0:fb:2e:b1:a5:b1:9a:33:0c:a0:b0:fb:01:
96:68:5c:a2:a7:f6:5a:4b:41:4a:47:af:83:27:09:
64:00:48:06:12:93:8b:03:b0:bc:1a:88:b7:a8:b9:
13:17:c8:24:45:71:bd:60:7f:06:41:2b:5b:63:e3:
ad:6c:95:e3:24:a4:56:85:91:c8:c5:1d:4c:38:34:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9B:A5:02:7B:57:8A:5E:E4:CD:63:13:62:D5:17:8E:B6:25:42:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
X509v3 Authority Key Identifier:
keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:75:78:1a:23:6a:55:47:1a:de:cd:e5:b6:19:c7:6e:dc:b0:
07:72:cf:20:39:33:4b:4e:28:84:a0:aa:c8:c2:f1:fa:2f:7f:
1f:20:4e:fe:15:c0:6e:ce:77:f0:1a:62:63:e0:d0:32:42:21:
7d:ab:85:6f:23:2e:5f:03:97:1c:e8:8f:63:66:13:9a:ca:d5:
5c:dc:98:ca:d9:02:76:ce:60:a3:8c:3c:d9:df:c4:b9:fc:8c:
d2:d3:2f:b4:f6:a3:66:5b:63:74:24:b9:51:f8:a6:fa:9b:60:
52:e8:e4:9d:c0:35:22:32:0a:a5:4d:7b:e9:5c:71:56:f7:d9:
97:22:3d:de:e9:85:2a:ab:ce:ab:c9:89:10:35:13:b2:fb:28:
b6:04:d5:78:e2:d6:a5:b9:84:fc:9e:26:e6:30:8b:c4:4e:39:
75:f4:fc:0f:be:14:f7:68:47:60:a8:6c:f0:29:d9:6e:c6:f4:
ea:9a:62:2e:ed:de:76:6b:35:d4:f2:ec:70:99:64:01:e0:97:
96:a8:25:08:4a:c5:cc:bc:d9:a8:eb:f8:0c:aa:3a:69:43:9c:
bc:80:ad:a5:5c:8a:f9:8d:55:b3:c5:08:d6:e4:a1:a9:bd:42:
32:61:6a:9f:cc:72:8b:7b:39:05:7d:79:bf:eb:f5:2a:26:15:
94:90:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:44 2025 by rpki-client