Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa
File: 8c609069-4384-3695-9ac5-2533f2d92953.roa (raw, json)
Hash identifier: gx9/Bd4/DJZ+J9TDaIWMA5VqinDEK9mYrbAY0hwo5BU=
Subject key identifier: FF:95:A0:7A:AF:1D:49:B0:F0:B1:5A:D0:E9:B9:01:F9:08:6B:2A:16
Certificate issuer: /CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8
Certificate serial: 010D0C9F432858487CEB342C6F977DB33FB66E80
Authority key identifier: 9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 46523
IP address blocks: 199.38.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:34:2c:6f:97:7d:b3:3f:b6:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=8cab7e2a-b5a2-4bde-a70b-594532c338f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:51:09:6d:bf:3b:33:55:78:f5:e2:71:9d:bb:
fb:7a:d0:30:99:ef:4a:f2:de:fe:53:63:46:db:4e:
46:f6:fb:6e:ef:aa:5a:35:23:93:40:db:08:92:ed:
25:6b:53:d6:66:bc:2c:50:71:ef:52:a4:b3:a9:9d:
6e:f1:ec:1a:e1:71:6a:ca:8c:67:30:d0:62:fe:42:
10:16:c8:f4:6e:ed:c0:f4:1b:5d:82:5b:c2:1a:9d:
e7:80:e5:6c:fc:76:19:28:3f:c9:86:e0:68:54:74:
9c:4a:3e:63:a5:4a:5e:d5:18:67:4f:d9:10:75:7d:
e7:65:14:30:3d:06:20:62:b7:e5:7c:a7:1b:3c:9a:
be:9c:f0:a3:41:b9:82:b1:ec:0b:17:f6:19:87:7e:
f4:7c:2a:5d:16:d5:db:dc:d9:49:db:3e:05:a5:9a:
3b:ba:41:33:19:c0:2b:9b:d0:bd:68:52:dd:9c:d8:
94:99:65:a7:a3:ef:43:c8:14:ee:1d:13:c4:3d:49:
18:10:dd:f8:61:f0:4d:a3:64:aa:02:37:4f:e1:f6:
05:63:e9:a6:fc:bc:4a:e6:05:f7:a3:76:c1:98:58:
47:30:19:69:02:c9:81:7a:09:10:58:e1:54:2b:03:
34:7c:85:a9:08:54:cf:3d:02:8f:18:ee:de:30:3e:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:A0:7A:AF:1D:49:B0:F0:B1:5A:D0:E9:B9:01:F9:08:6B:2A:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.crl
X509v3 Authority Key Identifier:
keyid:9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer
sbgp-ipAddrBlock: critical
IPv4:
199.38.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:13:63:5f:fa:49:c1:67:13:5e:9d:92:6b:d8:33:72:5c:d0:
f0:91:40:2e:e6:95:5e:f9:23:95:24:47:d4:c8:65:f1:f9:5d:
f2:98:d5:ff:c3:b6:93:c5:7a:15:c1:cb:1f:f6:d8:a0:ee:69:
cd:bb:c9:16:f0:b1:bc:34:9e:0a:20:57:07:d0:9c:6c:87:a1:
8a:64:29:9f:3c:42:de:89:48:c5:40:b0:7b:09:f8:eb:c3:98:
1a:80:5c:54:a6:01:51:69:a2:86:ed:c9:0c:45:77:0e:e1:40:
cb:70:a1:12:08:97:8e:97:f8:f3:3d:73:96:80:22:d6:ef:06:
fc:26:56:d1:79:dd:63:2c:59:bb:b4:9e:db:37:ff:a9:b7:71:
23:76:04:5b:c1:c1:f7:d2:ac:d2:fb:49:c1:49:e0:56:75:3a:
e7:c8:d6:35:54:a3:ac:ea:cf:6f:eb:72:52:6e:18:b9:85:ba:
2f:0a:f3:ad:77:72:cd:34:db:25:6c:a5:44:1e:90:53:d8:c4:
b0:53:6d:1b:c6:a7:ba:ae:35:ef:43:6e:47:87:ce:2d:45:5d:
92:3e:94:35:90:35:8a:66:a8:e4:2e:7e:c7:80:f3:85:f3:b7:
31:f2:91:35:59:00:47:c8:ec:13:8f:dc:eb:85:54:a1:53:94:
f0:d8:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:40 2025 by rpki-client