Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/a54a61b4-6c39-3d1f-af03-426895babea2.roa
File: a54a61b4-6c39-3d1f-af03-426895babea2.roa (raw, json)
Hash identifier: u8nFIV7y1YoqkF8e3bintUF3cKBUIbNamuVrdIYJJh0=
Subject key identifier: 6A:A7:1D:D0:B9:9B:AA:D9:65:B3:A5:A5:00:0F:BA:A1:4F:CE:CB:52
Certificate issuer: /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial: 010D0C9F432858487B85B516A2C887E6E0424D00
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/a54a61b4-6c39-3d1f-af03-426895babea2.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 26303
IP address blocks: 199.190.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b5:16:a2:c8:87:e6:e0:42:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=2d2e8c44-7633-48cf-8466-a1541e4f3905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:86:23:12:e4:16:8d:64:f6:0d:42:c3:99:
2e:6f:6a:a3:da:c5:38:23:62:8e:81:db:17:2e:47:
86:b7:69:ca:94:0c:01:8a:31:c9:31:5d:2f:f8:90:
ff:ff:9b:c5:57:c9:29:a4:88:27:7b:0e:5e:cc:18:
74:6d:2e:82:ac:8e:1e:05:9d:37:9d:ca:0c:6f:ed:
95:1e:de:f5:51:e5:03:57:52:2d:9c:d0:73:70:9c:
ba:dc:14:b5:9b:30:a6:6d:a8:5e:2b:4f:74:c3:73:
10:96:77:84:d7:f3:cb:2c:80:35:bf:e5:30:0f:fb:
20:df:50:35:e3:38:a3:f3:7d:73:36:87:e6:ed:43:
d5:3e:0b:b6:37:43:b1:71:a4:e2:9d:79:31:f5:1f:
27:86:8c:19:7f:8c:3b:d4:30:2e:d8:38:59:7b:2e:
23:52:e6:1e:35:17:51:90:b8:48:35:58:1c:28:e8:
91:d9:c1:f6:87:85:0a:2b:5d:21:f6:2b:11:ea:f2:
77:34:19:42:28:62:98:80:d3:fb:b0:fe:e5:56:cf:
52:ab:3e:f2:e9:8e:63:33:b9:9a:88:1b:db:dc:10:
85:73:64:f4:5f:62:ef:33:50:76:07:8d:b4:c2:7f:
b6:09:82:a0:5d:c3:b4:0d:f5:ec:a7:25:91:35:40:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A7:1D:D0:B9:9B:AA:D9:65:B3:A5:A5:00:0F:BA:A1:4F:CE:CB:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/a54a61b4-6c39-3d1f-af03-426895babea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
X509v3 Authority Key Identifier:
keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
sbgp-ipAddrBlock: critical
IPv4:
199.190.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:b4:57:f7:1e:f1:62:38:a8:65:8a:af:f1:fa:a7:11:2b:ca:
3e:42:60:f7:42:2a:1e:bb:d6:95:49:15:1c:78:0e:1c:42:54:
31:34:95:70:34:f0:e6:69:92:1c:d2:44:1d:5c:2d:82:42:e4:
f9:7b:13:aa:fb:db:f1:c8:ef:f4:7b:5c:d7:fc:fd:7c:86:8e:
df:cc:9a:14:53:10:da:c5:40:f0:29:22:48:8b:d2:4d:19:a9:
10:41:62:4c:7a:2a:7d:af:02:45:1d:88:11:3c:7f:ee:59:c9:
a9:1b:d5:9c:13:47:9a:8f:00:7e:84:e7:f5:d5:cb:f8:d5:e5:
bb:02:37:a9:83:25:58:0b:32:19:92:1e:64:1d:33:f2:62:0e:
2c:9a:cc:e6:b9:44:5e:fb:95:64:94:db:ed:dd:f4:6b:1e:b7:
f2:3c:45:ca:ef:1f:3d:24:54:68:50:58:07:70:00:02:3a:dc:
ec:30:2f:ad:db:c2:02:da:0a:b3:9d:ff:f1:d7:b5:3c:2b:e6:
aa:3b:6f:29:a5:4b:b7:06:58:c4:26:96:69:9c:5a:31:45:19:
82:47:16:62:d3:e4:c4:68:e7:06:c3:9f:2b:99:43:cc:35:87:
7c:9f:31:12:1d:ca:cf:d2:11:a8:f1:94:47:aa:5b:72:69:1c:
6e:a0:94:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:03 2025 by rpki-client