Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/2b4275dd-d69f-374d-881e-41e5ad8f4aec.roa
File: 2b4275dd-d69f-374d-881e-41e5ad8f4aec.roa (raw, json)
Hash identifier: gd5WUHLbjM3CYGrzo2J+9iCR3wFg0WFRYXs2EfqEy04=
Subject key identifier: D3:5E:25:41:A9:12:B1:45:B0:97:7D:E9:69:A6:06:24:DD:78:EC:85
Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial: 010D0C9F43285849350E984B714F9780FBBADEB0
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/2b4275dd-d69f-374d-881e-41e5ad8f4aec.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 33392
IP address blocks: 199.101.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:98:4b:71:4f:97:80:fb:ba:de:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=ecdfad3b-f3f4-456c-8540-035e52dc2ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:3e:29:28:6c:c6:9e:b6:fc:6f:fa:f2:c9:
be:c4:33:b6:84:19:c5:23:3d:bf:3a:6c:1a:66:d3:
e1:eb:9d:5f:2a:0d:e4:80:64:49:df:ae:e4:bc:a7:
99:a6:ef:77:b9:66:38:8b:01:e2:1e:b9:67:66:ed:
be:fa:2d:1e:30:73:55:80:ac:f7:1f:54:ee:7a:bb:
da:e3:44:b4:4f:59:f3:d6:04:df:c9:12:f8:d2:51:
83:f0:da:cc:a3:41:ac:5e:b7:de:da:21:b0:d1:44:
bd:63:2f:6a:d3:85:83:81:d7:67:0d:52:0c:7e:1b:
fa:92:4f:7c:34:c6:07:cb:d1:04:af:30:f0:c3:c7:
9a:69:12:f7:74:c6:7b:49:d5:c2:0a:1a:3a:49:19:
ce:3c:b4:39:6c:7f:4e:e0:51:f3:64:98:2c:4e:7f:
6e:b2:87:02:d5:ca:37:a4:a4:52:b9:11:b0:55:b9:
20:e4:73:6b:62:9f:32:f9:70:1e:36:c7:db:88:66:
82:59:aa:e7:25:18:e9:a1:e1:40:d4:f5:f3:bc:15:
dc:ed:9f:2a:f5:07:18:0f:fd:e2:8e:4b:ea:20:87:
80:61:69:c1:c8:e3:03:fe:a0:cd:c7:6e:a9:14:a7:
f4:ef:fd:3b:40:cc:1c:02:9c:b0:93:26:83:24:54:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:25:41:A9:12:B1:45:B0:97:7D:E9:69:A6:06:24:DD:78:EC:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/2b4275dd-d69f-374d-881e-41e5ad8f4aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
X509v3 Authority Key Identifier:
keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:99:d1:ce:bd:eb:28:5d:4a:b4:31:60:ae:66:ad:06:ee:6d:
fa:30:b2:8c:c9:92:66:01:1c:5e:15:4b:dc:1e:d4:e8:2e:4d:
aa:09:58:6e:86:f2:01:26:e7:12:f2:b7:ed:27:3a:76:61:ac:
cd:2d:33:d9:5b:74:d6:78:94:fb:d8:a3:0a:15:c9:b6:88:d6:
94:38:04:db:92:f2:0e:aa:2a:6e:ff:6a:08:af:4b:28:cd:75:
a9:15:11:33:c8:50:6d:3b:bc:17:74:a1:26:e1:0b:8a:5d:91:
98:2e:e4:09:13:4b:59:51:3b:64:cb:ba:ce:7d:0a:61:6b:af:
f4:a2:68:bd:76:af:e5:ef:1a:35:48:24:47:21:d2:bc:13:91:
f8:c2:f0:bd:25:7c:a6:12:d6:59:b2:b7:a2:35:9b:8c:46:72:
b7:b5:e9:13:2a:39:aa:0b:9f:06:6f:02:0d:b4:73:35:e8:24:
ed:a1:9d:91:db:67:02:49:c4:a1:88:24:34:b1:0d:8a:ac:56:
7f:57:47:02:13:d7:dd:da:20:98:ee:f2:30:ad:7c:b1:92:62:
5d:91:0c:08:02:ea:36:28:1b:03:c5:5e:b2:26:e4:40:bc:4d:
20:f5:f2:7e:54:46:a0:cc:49:23:ef:c2:b4:93:6b:67:ed:80:
f0:47:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:32 2025 by rpki-client