Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa
File: 0fa850de-079b-3985-8c4e-c1c41937a99b.roa (raw, json)
Hash identifier: VjLEv5PwNiU0is3H3BI9fLLxAasJ7JaUaK+9+8VyPPU=
Subject key identifier: 24:BE:69:0D:ED:B5:CC:7C:F0:3B:87:C0:59:CF:71:09:62:5B:93:07
Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial: 010D0C9F43285848E21B08E9C98D7A1A6813C400
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa
Signing time: Fri 14 Feb 2025 19:54:03 +0000
ROA not before: Fri 14 Feb 2025 19:54:03 +0000
ROA not after: Thu 15 May 2025 18:54:03 +0000
asID: 16509
IP address blocks: 199.101.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:1b:08:e9:c9:8d:7a:1a:68:13:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Validity
Not Before: Feb 14 19:54:03 2025 GMT
Not After : May 15 18:54:03 2025 GMT
Subject: CN=54ab2522-988d-4038-8b86-6508b76f79b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:92:1f:48:ce:3a:b6:c6:b5:c2:26:40:b8:
3e:c7:d7:03:b2:f2:5e:9a:21:5c:af:5a:0a:12:de:
5e:82:e0:05:30:ea:39:eb:b9:0f:1c:5e:44:14:92:
d4:f9:42:1e:4b:a5:f8:64:67:73:66:a1:c3:77:da:
ed:3f:b9:3b:30:c5:9a:45:b7:ee:09:cb:12:d4:9e:
2b:ec:cc:fb:29:1b:3f:84:6e:fa:93:7c:e0:5f:ba:
dc:0e:57:1f:7a:d3:bf:83:84:4e:88:0f:1f:f6:8e:
41:74:bb:36:89:b6:7b:e4:bc:14:1f:88:b1:f1:5d:
2a:c2:f0:e5:c0:14:f6:8e:5e:56:a4:da:83:35:12:
8a:dc:f9:d8:8f:c1:cb:d8:7a:fd:e1:bb:35:19:5a:
39:71:22:99:6f:60:f3:92:16:9f:7b:02:5b:33:d6:
67:c7:32:71:85:1e:2f:14:e8:27:be:e2:e6:9e:a0:
33:c3:22:01:c0:e5:a1:71:66:40:52:a4:3f:1e:05:
4d:39:a6:89:00:8d:72:80:a9:98:aa:41:fe:94:93:
14:9a:e3:e0:a0:5a:a3:2e:6e:ff:8d:8f:20:c7:94:
62:c9:ef:18:46:e9:13:0b:c9:3b:23:e4:f9:31:37:
4e:b3:34:76:3f:15:3f:ee:07:82:0d:13:5b:c9:1d:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BE:69:0D:ED:B5:CC:7C:F0:3B:87:C0:59:CF:71:09:62:5B:93:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl
X509v3 Authority Key Identifier:
keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:76:b7:50:00:24:53:22:f5:10:6e:a8:1f:c9:7a:6a:9a:94:
28:c7:38:fb:8d:c0:a1:de:ff:37:f4:c2:09:81:6e:77:a2:1d:
ad:9e:e7:a7:d5:27:73:41:ac:95:1f:db:2f:f2:e8:5d:1c:4d:
cc:51:f3:10:e4:66:12:f4:06:96:85:46:1d:46:e3:e6:19:b9:
93:59:be:c4:ea:02:9d:6e:d0:00:8f:f0:d0:dd:e5:8a:e5:63:
b0:f9:a2:46:62:26:76:48:3c:9e:be:2f:16:32:6a:dc:93:96:
f4:68:29:04:4f:75:9c:6e:3c:32:a9:32:4e:28:87:f3:02:89:
7e:0a:c8:b9:cf:e5:ca:24:52:d9:d2:81:5c:af:5e:f2:6d:4c:
0e:7d:54:91:65:6f:35:da:4c:e8:ee:42:66:11:f6:ec:43:e8:
cf:af:3d:52:64:b8:79:09:99:47:12:97:8f:04:d5:61:6d:be:
5c:48:5f:dd:c8:22:7e:31:7a:c3:d8:67:86:94:00:84:09:c0:
fc:f7:89:5b:a8:b4:da:32:52:ec:84:e2:62:cb:94:c5:a3:41:
39:1b:09:b5:14:53:95:a9:dd:23:44:af:35:40:fe:fe:bd:5e:
cd:b6:a0:52:33:22:22:aa:d0:7c:72:05:2d:5f:8a:40:20:04:
60:af:b4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:41 2025 by rpki-client