Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa
File: dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa (raw, json)
Hash identifier: 5aTSOJbTUbuEBpeYfoviY/2Cyh8ylHAckRqQtSzWbDo=
Subject key identifier: 9A:66:7F:31:9A:14:B8:CC:82:37:9E:73:A1:E9:5C:8A:7E:EE:5B:80
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F43285849244E85F37687600F00A9A2B0
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 199.45.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:85:f3:76:87:60:0f:00:a9:a2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=0c79f95e-6552-41f8-8e6d-1ee9b26e57a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:f3:6d:42:3b:f4:ea:dc:e3:6d:c6:2d:f4:
84:24:68:4d:9c:b9:24:a5:cb:95:61:20:0f:17:5a:
b7:03:aa:e4:e1:ee:c0:16:0d:0e:8d:a0:ca:60:78:
78:3a:15:8b:6a:2c:6e:51:a8:df:85:4f:0d:82:b6:
07:15:a6:7b:70:4c:32:78:4a:4a:0e:59:79:04:cd:
b3:7e:a0:8d:66:06:51:24:01:d0:a4:cd:c0:08:07:
6b:ce:39:29:3e:5a:ba:aa:c4:6f:6e:5b:fb:c8:36:
54:e8:ed:47:4a:94:42:70:21:d8:50:0f:06:66:ad:
c9:63:67:dc:64:d2:25:33:9f:c1:26:36:b6:54:ea:
08:f6:c6:67:c4:f1:91:bb:b4:b9:55:4f:e1:4b:bf:
29:af:c4:a8:3f:6d:0a:ca:b6:10:d6:75:43:66:5f:
fb:a9:87:a5:1d:ff:4f:aa:a1:94:d9:20:d5:2e:68:
36:4a:54:3c:79:70:d6:9b:b7:72:26:b8:81:0b:7a:
7b:40:54:c1:45:93:83:8b:e2:99:b8:e3:23:5b:be:
43:fc:3e:c3:01:e1:7d:65:5e:36:55:92:1c:b3:89:
9c:cb:64:71:16:71:f4:db:81:4b:2c:8a:0d:42:cb:
cd:55:54:15:67:64:f1:44:1c:c1:c7:99:48:f8:fa:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:66:7F:31:9A:14:B8:CC:82:37:9E:73:A1:E9:5C:8A:7E:EE:5B:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.45.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:d0:ea:36:13:e2:7a:f5:9f:71:33:08:09:28:e4:a8:f9:23:
66:41:60:22:ea:4c:61:5e:5a:37:4b:24:89:9d:2d:42:40:d2:
6d:47:28:6f:a4:f1:78:3c:76:54:f0:9d:5d:0d:7a:98:bf:53:
87:6e:ff:88:c1:8c:bc:3f:b2:2b:a8:7e:a4:99:28:57:40:96:
36:90:64:5b:06:e1:d4:6a:00:38:1b:43:cb:6b:7e:e2:0b:98:
5a:4b:c7:77:79:5a:eb:78:29:a6:34:a7:be:ec:f4:c8:81:3e:
e8:ab:b1:9e:2f:a8:80:fb:19:c1:98:ac:ba:df:66:b0:6a:fe:
de:4f:73:4e:55:c5:41:87:96:d1:df:7c:7f:b7:a4:62:bb:f5:
8d:3d:cc:06:a0:42:89:18:67:bd:87:06:bc:2a:49:a6:de:8f:
a3:87:47:af:a2:15:72:c9:17:56:b0:ee:42:53:b2:45:b3:60:
a5:66:38:27:f6:7c:87:97:b3:74:24:19:55:8d:23:7e:db:5f:
f6:1d:0b:27:19:b5:27:1e:32:75:91:bf:81:ec:5d:fc:73:4f:
1d:c2:20:72:ce:2a:ae:89:b9:0e:12:2f:49:44:95:c3:12:35:
fa:96:79:dc:ff:97:6d:0d:ed:d6:7f:54:df:1b:4c:05:3f:eb:
99:1f:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:35:56 2025 by rpki-client