Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa
File: bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa (raw, json)
Hash identifier: 2jNYTSITT3BKKzblivNn7eE1kqcTZpmzK3XB8nZ+wWA=
Subject key identifier: 54:D4:E1:55:12:8E:D8:C5:A2:A8:40:3D:50:F3:BD:3F:00:74:EE:6D
Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial: 010D0C9F43285848E59BCDAAD702CF1EE3FF8DD0
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 26677
IP address blocks: 199.212.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:cd:aa:d7:02:cf:1e:e3:ff:8d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=e5085215-7552-4956-8704-5a7adc59ab95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:ba:72:ce:78:bb:1b:59:90:32:97:08:a1:
83:de:bf:7d:16:84:52:fb:79:bf:92:c8:9c:56:37:
15:21:e1:d8:d3:81:5e:1d:89:81:b9:c6:24:b9:be:
5d:7c:49:92:8b:91:03:d1:82:ed:f5:2a:9d:f5:d8:
86:6c:a3:0c:69:39:0d:ad:e9:be:e3:9b:af:fb:f1:
82:70:32:66:65:4b:57:e2:3e:7e:2f:64:fa:88:52:
26:ae:50:20:16:fb:19:d0:4c:77:30:90:2d:3e:ff:
89:f7:02:e3:56:b3:28:d7:00:10:0a:fd:72:45:1b:
13:5c:30:18:59:e8:8b:c0:6b:21:c4:4d:9b:5a:d7:
73:fb:8b:b6:98:0c:03:f7:af:8b:52:ee:1b:79:c3:
6b:ae:9b:bc:2f:9c:1b:60:46:4b:3a:92:42:16:18:
74:f5:45:d7:f8:7e:33:51:75:a4:19:65:de:6b:81:
53:80:e0:7a:f8:54:b0:8e:39:88:6c:94:03:33:46:
73:af:09:8e:8f:d1:cd:c0:d8:cf:0a:c4:93:ef:0f:
d6:6b:b6:39:33:11:77:71:66:fb:4b:21:b7:a4:9e:
31:bd:11:18:de:82:b4:d7:09:c3:e4:a6:56:dc:f2:
ce:56:02:2a:25:d1:7f:d6:9f:72:61:c0:85:9b:c4:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D4:E1:55:12:8E:D8:C5:A2:A8:40:3D:50:F3:BD:3F:00:74:EE:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
X509v3 Authority Key Identifier:
keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f0:28:3d:3d:30:02:85:4e:bd:b6:c6:1e:c8:6d:77:7b:d8:
b0:8d:a5:91:76:2b:4e:f7:c9:c7:13:b8:bf:f0:6c:56:e7:5c:
33:c2:3c:01:81:6b:77:5f:ce:94:ca:05:f6:80:7a:08:5a:3b:
3c:db:89:e6:55:8a:de:5f:b3:aa:2a:cd:fa:ac:5c:74:5b:56:
6b:ed:2d:b9:f4:f4:d8:49:a0:d1:6a:30:db:7e:94:18:ca:25:
88:13:91:95:c4:e7:af:85:e5:e0:14:e4:89:b1:c5:73:c0:c6:
e7:76:8d:34:f3:53:43:39:5f:8f:41:41:8d:2e:31:04:65:98:
60:98:99:d2:5a:43:16:f8:28:49:cd:b9:60:af:fb:70:43:56:
03:4f:18:61:46:2a:f5:5c:33:27:53:90:bc:f2:f3:87:63:20:
03:16:5d:d5:7a:c4:c9:5d:2a:bb:6b:6c:6c:44:06:0c:9f:aa:
44:99:c9:be:dd:99:b2:42:62:c8:c6:87:70:01:f1:b8:83:ea:
e1:ee:37:9a:d3:57:ba:1f:b8:be:fc:ed:23:11:c7:eb:01:ba:
9d:6c:c7:e0:c2:9d:cd:84:c6:73:84:d0:f8:38:ef:1b:6c:f7:
9d:13:60:97:1d:81:8f:8c:8b:62:6f:52:f8:e4:06:df:17:19:
ed:d3:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:43 2025 by rpki-client