Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa
File: 33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa (raw, json)
Hash identifier: MJJ5pcVE8/55kjyOU4mZeg0sikOWMxTUtDDDZ6N4p/4=
Subject key identifier: 5C:33:DF:C4:21:96:9F:0A:37:39:F9:89:63:1A:A6:AB:72:95:D1:2C
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB74C3170C1692F414F900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 199.212.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:74:c3:17:0c:16:92:f4:14:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=bfa34e07-e3db-46b9-930b-5bafda5d7ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:7a:e4:af:56:2b:db:86:67:f6:44:23:20:
45:17:66:8c:a1:f6:e2:85:14:ba:ce:fb:43:d4:d2:
3f:c4:0d:ff:78:f6:83:3f:1d:8e:23:01:18:0a:6e:
5d:9e:b4:15:2c:ba:71:e7:b8:85:d9:88:99:a1:41:
99:40:fc:e5:65:76:9f:17:55:ef:c7:37:0d:96:30:
ef:94:50:13:82:83:67:3c:18:73:26:42:c3:4d:2d:
2b:47:1d:c1:ef:0f:99:91:bc:11:fc:78:23:cf:34:
eb:7d:a8:5f:3e:a7:80:b6:e3:95:13:cc:ec:09:5d:
f5:6e:1a:fd:4d:24:57:6f:80:54:52:dd:a4:a3:7a:
cc:b7:5c:7e:4b:e1:bd:07:bd:ae:88:a8:c0:9c:24:
b9:21:eb:4b:2f:21:e4:70:cc:41:2e:53:ae:80:64:
96:c3:91:b4:10:7e:0d:67:72:11:93:ba:cd:55:38:
46:96:87:d9:37:ee:ed:93:85:6c:4e:94:77:e9:3e:
94:70:e4:19:1d:fb:5f:f4:72:17:27:68:d4:cc:d9:
ca:7e:79:6f:36:33:6b:d3:55:59:b4:6c:e8:b9:db:
b8:79:50:f0:d1:d3:3d:1a:4b:98:9e:57:29:0e:e4:
8b:e5:34:fd:8a:6e:06:4a:81:4b:a2:e7:39:84:e2:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:33:DF:C4:21:96:9F:0A:37:39:F9:89:63:1A:A6:AB:72:95:D1:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:1c:48:6c:95:10:75:6c:36:a9:63:2d:d6:37:f4:0d:6a:d3:
b7:08:fe:9b:97:a1:41:b7:fe:88:eb:8a:44:95:b8:13:21:f6:
92:f4:84:f0:ea:55:21:03:6d:e6:32:d1:ef:1a:98:29:60:5a:
e4:8f:e6:a7:86:d7:bb:2a:05:f3:7e:ed:c1:5d:f8:2c:99:54:
20:94:2b:25:38:a5:0b:55:79:d0:86:c8:9a:f5:5f:22:0a:e4:
6e:6d:a3:38:a2:65:b5:7c:d9:9c:e1:e8:ed:b9:4c:0f:a4:a1:
7d:11:49:72:08:e5:2e:c0:45:55:8f:a9:db:4c:93:e1:a3:56:
27:dd:f0:6c:de:f6:37:a6:76:01:61:52:bc:da:a5:cf:0d:2e:
e2:df:ea:a6:28:5c:5f:0c:6a:77:19:00:1f:6f:d5:b6:fb:9f:
8b:4c:18:c6:f6:67:25:4e:9a:84:73:be:e4:14:4d:9a:11:9f:
6d:f3:83:a2:4a:6a:8d:12:51:ec:fa:e9:dd:80:8f:c3:f4:1f:
3b:54:95:db:f5:16:c4:5e:05:19:19:ba:7c:3c:ed:99:d4:a9:
3c:79:21:61:b1:7a:35:49:f4:21:c2:97:91:7c:dc:e1:42:1f:
41:52:73:03:61:c6:6e:32:25:41:33:04:56:0c:f9:c0:e7:a0:
88:50:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:22 2025 by rpki-client