Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f668b55-403c-3f01-a513-c3fdfe797f26.roa
File: 9f668b55-403c-3f01-a513-c3fdfe797f26.roa (raw, json)
Hash identifier: CYZR6LBWstDqpoMtSnJgi1cJRIupqbs6+5rxdzzs2CU=
Subject key identifier: D0:B1:7B:47:26:01:4C:22:37:EA:26:33:0F:1A:8A:09:FC:87:39:E2
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB770A5CB8FCF5C86DDE88
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f668b55-403c-3f01-a513-c3fdfe797f26.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 50.99.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:77:0a:5c:b8:fc:f5:c8:6d:de:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=736e67c6-ae12-4f0d-973b-a6ef7a2a9d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:95:8d:21:6e:6b:47:52:cd:48:cd:a6:10:
02:fd:ee:72:e5:6f:0a:7d:9d:2f:29:1a:2f:33:80:
66:34:f7:d0:3a:0d:87:6d:21:64:4c:01:b2:30:e4:
f3:7e:48:7b:b8:b8:92:aa:b7:62:c5:fd:b2:4c:6c:
94:36:9f:55:d8:63:40:e1:f9:f6:ff:7e:ac:8b:be:
e4:77:58:23:3d:4d:4f:8c:32:ee:85:89:d0:5f:56:
64:27:13:a7:8a:27:f9:49:c7:9d:21:c2:36:fa:e2:
6c:e8:d0:d5:04:2e:99:d6:cf:44:d6:a1:09:6c:6c:
f6:7a:e9:fc:ac:07:b8:38:78:e1:ce:de:7c:7d:a0:
db:9d:0d:3e:63:9b:45:d5:22:41:1b:6a:41:6b:89:
7b:e0:30:51:b4:57:7b:7a:d4:53:bb:23:87:ff:82:
f4:86:b1:d6:c6:11:05:26:a1:36:3b:71:49:b3:0f:
73:ad:04:67:35:f1:9b:81:06:28:a9:d5:a0:fe:30:
4f:04:85:d0:b1:5d:79:4b:c7:2f:6b:6a:33:91:29:
8f:39:05:16:05:01:ec:2d:0c:26:f9:db:5a:0a:8a:
12:c5:d9:78:71:26:ac:38:c5:59:a9:bd:cf:fa:aa:
d3:02:c9:7d:64:50:d8:6d:bb:57:a5:c1:b5:8e:cd:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B1:7B:47:26:01:4C:22:37:EA:26:33:0F:1A:8A:09:FC:87:39:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f668b55-403c-3f01-a513-c3fdfe797f26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
50.99.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:81:18:b9:5f:cf:5c:fc:65:1e:05:2f:1e:7f:bf:94:8d:b9:
43:ec:76:34:02:64:fd:74:df:fb:f7:3c:1e:63:be:87:39:52:
e1:3d:47:8f:46:56:dc:d7:c6:5c:46:a3:77:9b:c9:6a:f8:20:
5e:fb:54:0a:92:ce:bc:4d:c5:f8:7a:6c:33:84:43:31:4e:4c:
a8:c6:5c:a8:3a:c0:1a:65:14:b8:17:93:cb:7a:ae:c2:af:5c:
3c:03:90:24:69:dd:39:f1:0b:33:90:41:44:18:d4:f1:59:9d:
92:e2:16:2b:27:46:3d:1e:01:cd:0f:c4:eb:d4:29:d7:b7:9f:
aa:fd:53:ce:02:88:58:2b:c4:e6:21:0a:fd:97:54:32:a5:09:
ae:de:e8:52:a8:94:67:e3:a1:55:bd:e3:55:9e:17:9b:f8:00:
00:48:43:08:d9:5a:e9:87:8d:9e:7c:87:23:7d:39:ed:2d:6d:
51:25:6f:da:d4:84:76:3e:22:b3:47:1c:1c:85:e1:94:e1:4a:
86:0a:fb:94:c8:5b:ea:c7:59:d9:ca:24:08:ec:b2:23:93:d8:
04:9c:cb:4d:38:08:0c:d0:3d:3c:64:5b:b9:98:c3:6b:ab:bf:
f4:fe:6f:ce:85:81:2a:92:04:66:99:3c:c2:fd:60:a1:75:c8:
b1:bd:f3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:11 2025 by rpki-client