Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/7267e47f-9290-3848-8c1e-a76112771bc7.roa
File: 7267e47f-9290-3848-8c1e-a76112771bc7.roa (raw, json)
Hash identifier: VSrvULM4fAQE+TybXT9+DvlAzXLCVGbMPRf56OzifOk=
Subject key identifier: 1D:2D:05:A9:34:7F:23:85:B4:10:F1:45:CF:31:46:87:D2:14:75:51
Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial: 010D0C9F43285849350E986A5BDC507759B32C80
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/7267e47f-9290-3848-8c1e-a76112771bc7.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 33392
IP address blocks: 199.101.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:98:6a:5b:dc:50:77:59:b3:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=b6f2fd17-ad13-4825-92bd-fb1b98576bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:56:bd:0c:44:8d:1c:ee:f3:bd:d2:83:69:
29:98:d5:de:ab:c6:c2:80:d9:3e:a2:a3:72:94:00:
29:94:37:28:ec:21:d9:42:57:0e:e6:25:2e:6c:cc:
2f:f1:3f:ec:65:20:e5:d6:4c:ed:8a:93:4f:55:29:
0a:4b:b0:ba:16:22:78:0a:b6:38:83:52:73:68:22:
94:a3:7e:df:ee:dc:6f:7d:5c:0f:5e:d0:5e:31:84:
55:0b:96:74:33:d9:97:16:6e:8f:81:25:5e:a2:e2:
93:11:af:1a:46:cf:a0:42:61:e4:75:2c:a6:ed:ef:
f1:68:ff:20:aa:78:35:a7:7b:d9:2e:b4:39:81:47:
19:9f:0d:92:84:e6:e7:ba:f0:00:60:b7:be:cf:61:
3e:0b:c1:2a:09:81:65:68:90:b4:f5:32:8a:34:59:
9c:fc:9f:9b:17:3a:56:e4:1f:76:2d:39:f4:7d:e6:
62:31:ec:38:f4:c9:3e:8c:53:82:40:94:7c:37:82:
ee:2f:0c:f7:66:7c:77:fb:11:f8:09:5c:8c:e6:99:
4d:e7:b0:2c:23:44:50:8d:62:01:ac:f9:a2:04:a8:
a7:95:14:c8:16:66:e4:66:4e:67:40:a2:f5:80:65:
cf:18:8a:6d:3b:f6:29:51:26:5c:76:96:30:83:b8:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2D:05:A9:34:7F:23:85:B4:10:F1:45:CF:31:46:87:D2:14:75:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/7267e47f-9290-3848-8c1e-a76112771bc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
X509v3 Authority Key Identifier:
keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:92:5a:42:1a:22:bb:37:6b:b3:cf:51:b5:3c:a9:a8:9e:53:
95:51:44:9b:e9:2f:ef:53:aa:73:31:48:1e:c7:0b:5f:95:44:
1a:7b:f7:80:7f:6e:a1:d1:9a:cc:da:fc:e8:4f:c3:4f:5e:45:
ba:6e:f1:10:ae:0d:32:61:a4:31:10:cd:88:9e:a0:ce:89:59:
af:0f:0c:7e:db:bf:1c:31:da:80:58:a4:cd:16:31:72:1b:82:
33:cb:47:f9:47:fc:5b:12:e2:2f:0b:d2:ca:43:47:62:e4:27:
51:b3:d9:17:b8:31:b3:a8:a2:1a:49:f8:9d:49:d3:db:1a:e4:
e8:eb:dd:70:76:2d:dd:29:71:b1:e8:99:84:b1:8f:53:fa:e1:
0d:29:8b:64:a0:9f:59:e3:49:bd:7e:42:c9:d6:cd:5d:70:ae:
5c:b2:d3:10:5f:c4:24:20:27:d6:d7:d9:27:92:47:d0:3d:03:
bf:9f:84:47:83:ee:02:68:6d:64:0f:b1:39:3d:62:0d:8d:77:
f5:ad:75:30:d5:6b:b7:ab:e5:dc:bf:18:8b:76:5d:96:ee:59:
16:c1:27:ca:3c:ba:c5:d4:4f:d2:e5:10:7e:d3:6e:3c:16:66:
90:cd:ce:58:18:fa:26:1f:14:81:18:86:22:83:6f:ef:66:bf:
76:f9:cc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:38 2025 by rpki-client