Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/123983f4-735a-3daa-866c-0058ff4204c9.roa
File: 123983f4-735a-3daa-866c-0058ff4204c9.roa (raw, json)
Hash identifier: LL4R/WYN5/owKh4KKGnZyjqDkdOmDpBw+gjWeybhgU8=
Subject key identifier: 33:01:10:DB:11:BD:46:7D:5C:35:EB:DF:42:E8:63:BA:C9:BC:7B:7F
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E00660B6772CBB384B572800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/123983f4-735a-3daa-866c-0058ff4204c9.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 17359
IP address blocks: 199.255.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:60:b6:77:2c:bb:38:4b:57:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=57f9e094-ab07-422f-991d-1f7c8c0ff43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:df:d3:32:4c:5f:2e:7e:85:bb:f8:df:90:
8d:fd:e9:60:26:fd:97:b4:16:57:9b:b6:15:54:43:
ca:2d:1b:1d:4d:ed:70:46:15:a4:9c:0f:65:3f:5b:
46:e3:a1:96:8f:c8:65:1a:a4:d4:e8:5f:27:63:bc:
61:89:d6:20:ec:c7:60:c7:5e:7c:29:90:71:3b:73:
b1:2c:65:6d:4c:f8:44:aa:31:28:c1:64:7b:29:8e:
d7:43:8b:3b:88:24:78:82:87:f8:d3:ca:b3:c6:94:
45:c8:89:a0:72:af:4d:10:5a:e5:8a:2b:b6:f3:97:
bc:38:ec:f8:c7:a1:e5:ab:6d:62:b1:99:62:78:dc:
7b:d6:09:7c:a0:a3:e8:fb:f8:d8:a5:f0:a0:1a:44:
3b:d4:27:ee:24:fa:cd:7f:3a:1a:01:65:4b:aa:2b:
c2:c5:33:58:16:3f:44:de:b6:70:bf:47:fc:24:a9:
c7:ab:97:a2:2b:62:63:bc:c6:02:f7:9b:49:27:a3:
35:b9:fa:32:65:39:18:2c:b3:ab:f8:be:6e:92:a8:
c5:8c:79:ae:66:b8:8d:95:27:7f:de:15:ff:b2:ad:
3f:db:83:e7:2c:f5:4d:55:91:ff:0d:2f:b1:ae:21:
8e:05:0e:a9:d1:f7:d8:e8:a4:41:53:59:38:ce:bf:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:10:DB:11:BD:46:7D:5C:35:EB:DF:42:E8:63:BA:C9:BC:7B:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/123983f4-735a-3daa-866c-0058ff4204c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:96:fa:15:98:f2:ad:48:6f:4d:8b:77:07:82:06:7b:81:ee:
7d:9a:9f:6e:97:a7:6b:bc:80:3b:59:ec:0f:a3:09:74:6b:a8:
90:82:84:f4:e8:40:b5:33:80:ed:ad:b6:fa:8e:fb:06:4e:ed:
89:86:82:b6:ae:61:b1:eb:c8:c4:f1:d6:cc:07:89:1c:2c:6b:
f8:ea:f1:57:22:c7:28:02:4a:46:a6:78:71:1e:1f:e1:44:4b:
d1:dd:f3:21:9e:40:11:99:57:a3:a6:fe:e1:6b:93:bd:23:e6:
4e:0a:c7:66:59:e8:63:ba:87:e7:14:87:21:95:1a:f3:a3:72:
90:f5:b4:be:16:ab:8e:58:a6:b5:10:51:ec:eb:d6:ea:e5:54:
93:d9:04:42:55:7f:5f:98:06:d6:ff:69:11:42:4c:ef:da:7c:
ad:c6:d5:d6:4f:45:9e:27:ae:db:23:e9:d9:45:f7:e5:38:f4:
74:26:a9:ea:2e:26:1a:8d:7c:2c:b3:b5:0a:d9:a4:84:31:d7:
df:18:d5:cc:dc:58:34:c9:5c:45:f9:7d:67:33:7c:4e:63:01:
0e:e2:b0:a1:45:72:6b:d0:ee:b5:01:60:bf:77:7d:a6:da:b3:
45:3f:7c:6b:82:22:d3:d1:a2:d6:34:7a:fd:bc:d1:3b:df:fb:
0c:28:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:53 2025 by rpki-client