Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5fce096e-c3a2-3de3-83f9-796db1c6ccec.roa
File: 5fce096e-c3a2-3de3-83f9-796db1c6ccec.roa (raw, json)
Hash identifier: 4AxZuLgMu6zd+XvgosSqw1dBPkTpsz/iKi2u4dGJdcY=
Subject key identifier: 05:E4:84:1C:EB:81:51:1E:3D:05:9D:E4:5A:3B:3C:40:56:64:8F:99
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848F65BD7684D785CDE8BA84280
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5fce096e-c3a2-3de3-83f9-796db1c6ccec.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 30133
IP address blocks: 199.6.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d7:68:4d:78:5c:de:8b:a8:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=887f93ce-8a4b-4435-bb36-760512cb1ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:c9:09:e1:a9:f6:52:d8:86:b7:30:34:4f:
6f:5f:f2:cd:7d:4e:76:9e:74:95:e3:c8:50:39:88:
af:50:26:a4:73:33:c6:4d:8a:87:3d:83:c1:ae:bd:
f4:6c:ef:89:1a:53:11:8d:1c:4d:67:d8:92:2e:7f:
0c:63:7a:ab:18:b1:56:64:de:bc:57:c7:8c:0c:22:
92:1a:76:cf:03:a1:f5:e2:88:7c:15:fd:41:4c:91:
7f:93:63:0e:82:c2:e6:00:06:fe:0a:cf:66:60:d4:
28:9a:c9:30:b7:76:db:e5:af:20:8b:80:00:27:0b:
0c:a2:cc:3c:54:1a:41:0e:b0:5f:c6:f6:98:57:bd:
14:58:b2:d7:f4:44:ff:44:e5:82:e7:91:fd:a3:57:
8b:20:55:ac:17:69:e4:e5:40:89:a6:59:41:92:c2:
f8:a7:5a:12:4c:cb:60:87:9a:d4:73:67:77:8a:24:
8b:41:2f:cb:a7:c8:4f:5a:99:ad:b1:b7:96:98:82:
d4:54:d3:03:05:4b:0b:9a:10:c5:6e:0f:8c:c8:3f:
3a:41:19:85:f3:e9:5e:ff:90:42:35:5d:ab:b8:8f:
84:a4:2f:26:d4:9d:13:30:b0:66:a1:58:47:16:e9:
90:78:66:b1:90:57:82:d4:97:89:f0:25:98:e0:5e:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:84:1C:EB:81:51:1E:3D:05:9D:E4:5A:3B:3C:40:56:64:8F:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5fce096e-c3a2-3de3-83f9-796db1c6ccec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
199.6.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:24:23:56:d0:29:a2:7c:91:28:f8:af:66:48:66:ed:80:d6:
65:05:9d:73:10:af:91:e0:c7:5f:84:03:f1:30:77:1e:55:b1:
92:77:be:5f:a7:e7:6b:1b:9d:17:89:ed:65:1d:5f:d0:49:4f:
ff:c8:4d:0a:d2:34:ca:54:8f:a7:23:27:ec:e1:e3:f9:7b:63:
00:34:06:4d:8d:f7:b0:df:81:dd:b8:8c:f3:19:e0:d1:65:04:
96:60:d6:a3:d5:83:e7:9f:db:5e:34:7a:7f:46:af:99:29:3a:
24:58:2b:12:69:eb:dc:33:2c:9c:0c:dd:77:ab:ed:a6:59:a8:
54:a0:68:fe:d3:45:61:91:1b:b4:16:96:21:dc:94:5f:45:61:
52:3b:ea:d2:ab:b4:0e:e7:50:ab:14:e1:7e:e4:32:24:8a:75:
d3:d4:97:77:cd:42:4f:e2:2a:54:bf:6f:fb:bc:0d:b7:48:0f:
ad:56:95:00:af:99:af:b9:cd:4d:8c:b5:04:0e:09:ac:25:9e:
17:2f:cd:45:35:d8:d3:d5:3f:cf:ad:50:75:5c:a9:d7:27:f1:
29:1e:58:4b:41:6c:48:5c:55:1d:26:23:0c:06:dc:fb:c0:df:
69:7d:d3:15:e2:68:f8:d2:cc:68:3b:68:8b:87:34:1f:09:f8:
95:08:15:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:10:09 2025 by rpki-client