Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9b38cfce-bac1-32c9-96e7-2bcb44f3c23d.roa
File: 9b38cfce-bac1-32c9-96e7-2bcb44f3c23d.roa (raw, json)
Hash identifier: rZ44wIQGEnmomVIQAeTJNuricQpy1KTLmlgRJoA3IjI=
Subject key identifier: 5F:16:18:CC:B2:17:34:90:1C:78:F8:C1:E8:F3:E5:7E:9E:5D:DF:F9
Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial: 010D0C9F43285849350E983D6219C708EBBDE480
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9b38cfce-bac1-32c9-96e7-2bcb44f3c23d.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 36511
IP address blocks: 199.101.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:98:3d:62:19:c7:08:eb:bd:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=858bf6b2-0843-4e65-a2a6-51acf322dd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:13:03:55:03:c9:5f:82:81:db:f6:25:78:
7a:5f:16:be:ac:d5:a6:91:43:f3:b3:27:a5:8e:d9:
52:69:67:de:56:0b:16:b7:31:e2:f8:96:e6:4c:60:
76:33:3c:c6:b1:8f:51:b5:8d:63:df:d2:d8:3b:99:
68:67:bc:42:41:00:2b:28:4e:ca:75:2a:8e:f0:39:
77:41:25:68:8f:d9:2f:23:d4:93:9f:06:b4:0f:70:
09:c9:f0:ce:cf:57:c1:28:19:54:81:5b:13:46:99:
ce:c5:22:0f:4c:d8:2a:66:41:bd:0d:0d:07:8d:d4:
92:07:77:9d:87:69:82:6d:29:e3:2b:33:ec:c1:f6:
51:91:c5:4d:6d:12:94:31:78:72:21:bf:07:f6:02:
7b:08:02:53:8a:09:59:68:cd:1e:cc:4f:a5:3c:58:
14:cf:78:6b:13:bf:2a:9a:1e:90:e9:5a:ff:7e:5c:
9f:5d:cd:44:5c:a3:ed:5a:ac:bd:3c:7a:20:a8:e8:
3d:f6:41:5e:1d:b3:8e:08:f2:41:8f:b6:0d:35:f8:
a8:c4:f4:a1:9c:8b:1b:84:fc:40:e2:be:ab:84:82:
aa:58:5e:59:9c:18:32:e8:ba:6d:a5:5b:b9:fd:e8:
27:e0:e6:f1:8a:9f:ab:34:bd:16:05:d5:a7:7d:61:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:18:CC:B2:17:34:90:1C:78:F8:C1:E8:F3:E5:7E:9E:5D:DF:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9b38cfce-bac1-32c9-96e7-2bcb44f3c23d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
X509v3 Authority Key Identifier:
keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:bf:d0:ff:7e:28:7f:d4:1f:55:6a:36:b7:51:3f:e9:df:2a:
e4:b6:a6:0d:94:60:9b:72:4d:5d:8e:ff:bd:b9:b8:42:61:22:
45:f3:59:14:a6:b9:58:b5:cf:ee:dd:d5:c1:da:d0:fc:83:94:
11:7c:2e:01:0f:91:c9:6f:e2:c8:d2:fd:8d:ef:47:36:b8:c7:
30:4a:13:4c:22:7b:74:dc:59:ae:fa:55:17:94:b5:ca:99:91:
21:1b:5c:51:69:b1:8e:48:76:27:40:e3:84:c8:2e:89:46:b9:
b7:04:b3:dd:8e:ed:59:64:f1:a6:fd:13:95:b6:72:7b:58:48:
ec:e6:04:75:0b:13:15:19:19:ab:20:d7:b1:e9:e4:4b:b7:e9:
11:e3:90:a1:ce:b5:c1:03:fa:c8:4c:6d:af:40:d3:c7:57:b4:
87:e7:2f:d6:90:f2:6a:63:37:f1:ca:60:a4:6e:6b:5b:ab:fe:
48:14:39:ff:8d:84:1f:29:a8:d1:eb:ff:ea:1d:45:da:64:d3:
b1:19:fd:0f:e7:c0:22:02:33:87:b2:8d:74:46:98:d9:29:c4:
a1:b1:de:b7:a0:17:32:7d:51:dd:c0:64:05:0d:db:dd:44:9a:
bf:2a:ce:56:63:4f:fd:1a:99:f8:eb:f1:d0:89:af:f9:a7:d1:
3c:ea:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:52 2025 by rpki-client