Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69013c08-1e79-3b92-bde2-f7fe9be7b522.roa
File: 69013c08-1e79-3b92-bde2-f7fe9be7b522.roa (raw, json)
Hash identifier: Tu4lAGPl0Zvosn++gSXFmvglp9Fo9ONirm039qhvToY=
Subject key identifier: EF:AB:4A:27:F5:DB:7B:CD:A0:E1:1A:51:FA:79:A5:54:A8:70:3B:93
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C5817F2726FF32D689A21C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69013c08-1e79-3b92-bde2-f7fe9be7b522.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 199.223.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7f:27:26:ff:32:d6:89:a2:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=9b792170-ac06-4106-a78a-04b35716de00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:12:11:bd:9a:ab:43:e9:b8:a5:f1:3a:87:
ab:16:48:26:e1:ed:03:33:5f:4b:5b:93:b1:e4:93:
5e:43:36:9b:9d:80:92:77:8c:5f:c7:23:79:12:0e:
d7:21:cd:69:7d:07:b2:0a:93:34:65:d9:fc:47:24:
37:b5:5c:17:63:f6:7f:34:f8:bc:7d:a7:fa:9e:24:
e3:f8:13:e5:ed:25:18:5d:4d:11:5f:85:7f:69:6e:
fd:7c:ff:81:45:4d:9a:03:d1:91:42:51:e3:12:d7:
77:e1:64:c7:e1:c4:42:cf:69:24:3e:1e:a4:d5:61:
95:39:7a:41:50:dd:da:ac:04:4d:b1:47:2e:40:9c:
89:fb:9c:c5:dc:c7:54:97:25:6e:be:1d:49:55:1c:
32:6f:b5:05:08:5e:fe:64:6e:a7:cf:f1:99:8d:10:
00:00:ae:01:d8:d3:24:11:31:1b:e2:7d:f7:35:22:
fa:a2:79:9f:6d:98:ab:2e:98:ba:a3:3a:ff:f2:8b:
b4:52:e0:47:af:b7:b3:60:af:98:9e:c7:b6:43:15:
64:bd:ee:d5:f3:35:f0:8b:01:27:e7:78:a4:e2:fe:
4d:12:c5:e2:39:28:04:6a:07:39:96:2c:76:7d:cc:
7f:dc:df:b5:0f:e3:c3:e5:d4:98:b6:42:d8:51:cd:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:4A:27:F5:DB:7B:CD:A0:E1:1A:51:FA:79:A5:54:A8:70:3B:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69013c08-1e79-3b92-bde2-f7fe9be7b522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.223.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:ee:7c:38:05:94:9d:0b:4a:94:5b:5b:92:c8:bf:cc:6e:14:
57:15:f2:3c:de:92:09:69:db:6e:27:10:6b:6a:1a:21:7e:6b:
1d:f5:bc:17:60:39:e8:80:29:d9:4d:ee:7d:52:fc:be:68:34:
35:41:bf:83:8a:48:c6:e6:51:b5:55:c9:b6:93:ae:39:36:5f:
0d:c1:29:f2:db:76:f2:4f:1c:47:a0:be:b8:2a:0d:da:c1:d9:
9c:1f:03:24:40:b6:85:58:c0:88:19:00:c5:82:03:fe:e4:45:
be:0e:1c:04:61:bc:f2:55:81:55:0e:1c:94:df:6b:30:23:99:
66:9e:b9:12:91:b4:39:51:64:6e:eb:87:41:94:25:5f:8d:4a:
86:16:b2:71:65:32:4d:fe:f4:67:18:66:45:ac:a9:f1:58:dd:
c3:e1:d9:41:b2:53:72:f9:3e:36:78:24:4c:07:b9:6c:bb:f0:
aa:04:47:83:cd:ba:b0:7d:4b:91:13:a8:e2:8c:3a:cb:6c:63:
3a:a9:3d:b9:53:4b:80:88:16:75:bd:db:5c:07:45:c0:d4:29:
97:f3:0f:ca:5a:e5:8d:48:d8:c4:f8:a0:e9:b8:c9:ec:48:af:
05:fe:c8:5c:8c:35:48:3e:93:33:df:a4:39:da:3a:73:cb:64:
14:9b:71:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:48:30 2025 by rpki-client