Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4b0a632c-dbe4-3ea8-b6a9-38280d8b6078.roa
File: 4b0a632c-dbe4-3ea8-b6a9-38280d8b6078.roa (raw, json)
Hash identifier: L4RJWHhzf376NiAS17u7zNuLhonApnbDPJUR0Io76E0=
Subject key identifier: C8:58:F8:50:21:16:91:CE:CE:A4:FB:62:9C:CC:46:F4:DC:1D:8E:81
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F43285848FD56BA0A6B7CED399F6F66F0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4b0a632c-dbe4-3ea8-b6a9-38280d8b6078.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 1239
IP address blocks: 199.48.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ba:0a:6b:7c:ed:39:9f:6f:66:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=3f3e97b1-3690-458c-8e97-c5dec61d3a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:d6:7b:6d:ec:02:13:3f:db:a1:0d:68:4e:
ec:8b:0c:76:55:87:29:ce:1e:4e:4b:00:7c:b8:95:
4b:f4:33:9a:cf:2a:b7:8a:b9:6a:70:1f:38:92:dc:
89:45:11:57:7e:78:ea:3c:0d:a4:80:91:c2:fe:4a:
fd:2a:e2:d1:14:79:98:b5:9d:66:88:0a:6a:51:7a:
93:ca:55:ea:9e:90:ad:68:5e:9f:8e:8c:95:5c:43:
9b:b8:04:19:11:01:74:86:95:c4:cd:f4:86:50:aa:
a4:c0:ef:1c:49:f0:2d:aa:c7:06:66:40:5a:15:63:
e6:37:a1:87:32:26:a2:60:79:e6:9d:1f:9c:24:77:
0b:95:21:cf:ae:d1:99:9e:f9:ce:15:d2:2a:25:3e:
4c:4d:06:56:b4:26:2d:f9:7f:da:d4:f1:41:aa:e7:
97:a2:b0:58:cf:11:86:78:b0:af:0e:11:ea:1e:3f:
28:02:b6:ce:64:2a:c8:62:ac:bf:26:fc:6b:37:58:
e6:74:82:2a:21:0f:54:51:72:a4:a5:5b:52:f4:aa:
39:a5:69:96:ab:fe:89:b2:19:59:62:3c:a5:3f:2f:
b0:f1:ed:6c:1b:e6:be:af:da:5b:05:e0:f0:2b:1d:
05:d1:01:4b:90:36:31:3b:98:86:32:e6:bf:04:92:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:58:F8:50:21:16:91:CE:CE:A4:FB:62:9C:CC:46:F4:DC:1D:8E:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4b0a632c-dbe4-3ea8-b6a9-38280d8b6078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:ca:63:6a:18:49:f1:1f:78:9c:73:2c:be:d7:64:33:5a:13:
09:c8:be:83:b8:95:5c:e4:39:ce:10:a3:23:7f:cb:85:75:f9:
a6:38:01:3f:72:72:9f:30:b8:0c:84:67:72:1b:4a:fe:3c:e9:
8b:20:71:bd:95:0f:24:72:f1:ac:46:68:e7:ad:8e:96:67:97:
6e:7e:b5:50:f0:06:99:73:56:11:03:5f:a9:30:20:7b:4c:da:
5d:72:70:0d:f3:3d:e6:f0:49:dd:f3:d8:25:5e:02:b0:bd:67:
9d:32:16:34:37:65:ce:3c:07:68:af:85:3b:cd:24:fe:37:ad:
a3:cf:5a:49:31:85:1f:d4:fa:6e:45:0a:f1:71:84:b3:1b:ab:
fc:74:c3:89:5b:2e:f7:15:34:d2:07:9d:3f:86:08:c9:d9:00:
dd:8a:19:a7:a4:98:e2:72:68:62:13:6f:78:57:27:5b:9c:be:
58:b5:f4:b0:fb:f3:81:18:90:ee:0a:0c:70:3a:0a:43:0e:54:
f6:3b:5f:e2:ad:28:57:a2:17:bc:95:d4:72:b7:d4:69:03:18:
ef:e0:b3:cd:03:29:13:9b:2f:5f:c7:a8:f9:cc:70:40:f6:8c:
56:fe:54:4d:0b:e5:93:dd:c5:61:48:c7:b1:dc:fd:8c:6f:fa:
6c:ce:d2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:59 2025 by rpki-client