Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa
File: ba5ee86f-ee01-3881-91fb-3459183d215d.roa (raw, json)
Hash identifier: qbAiym0UBMDjSQ3N2jgxXnYF65Qtlh63OKcraKkyiwU=
Subject key identifier: 4F:AA:6B:D0:DC:0D:A2:7B:C9:13:FD:84:55:7D:F6:8D:25:69:B0:4C
Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial: 010D0C9F4328584913AC210F9C0AF8F87DB2BD00
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 32181
IP address blocks: 199.168.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:21:0f:9c:0a:f8:f8:7d:b2:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=6a1520c9-632e-4380-82dd-367e5ea65582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:a1:93:30:24:ec:18:ec:35:2f:34:43:c5:
5e:90:17:7e:d8:b4:e3:ac:47:97:21:6c:30:77:f1:
c1:f3:d9:bf:c3:9a:a7:25:79:43:e9:10:42:6d:1e:
a9:bc:93:8a:c5:3c:83:ee:01:fa:04:26:bc:dc:54:
07:2a:76:4b:91:2d:08:6a:06:3d:bd:8f:b9:d6:06:
da:18:c1:b2:49:81:fd:c9:98:cf:0a:d0:20:86:03:
05:5f:5e:f3:fc:f6:fb:db:c8:2c:30:ce:6d:71:57:
b5:45:5c:8e:02:95:4d:af:dd:23:80:a0:5d:b3:8a:
0e:b6:e3:42:46:7d:7e:7b:1d:0f:b7:8f:6d:5b:07:
cc:ae:19:07:76:cd:21:cb:65:bd:76:02:ea:4e:6c:
19:19:aa:ab:95:e4:c1:d0:93:f4:e7:a4:e9:86:07:
1d:89:bd:46:23:b0:57:63:45:28:17:98:98:1e:79:
a6:c2:ed:7e:b9:23:de:5e:c1:27:37:e8:4f:71:de:
1a:23:69:6d:46:bc:7a:5a:78:ba:44:e2:60:a0:e3:
ba:59:3a:f2:61:67:a3:ab:6f:94:b5:16:97:3e:2e:
76:8d:d9:fc:cf:f3:6a:cf:b2:44:8d:90:63:65:bf:
49:07:69:b2:b8:fd:76:c5:57:e2:0c:80:a8:0f:31:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AA:6B:D0:DC:0D:A2:7B:C9:13:FD:84:55:7D:F6:8D:25:69:B0:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
X509v3 Authority Key Identifier:
keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.168.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:a8:15:2d:57:c8:37:45:4a:75:83:02:8d:84:03:27:71:6b:
9b:0f:6f:bf:ff:e3:c1:27:44:f2:5e:33:9c:7c:25:c8:5c:3b:
e2:f0:8f:ab:66:82:fd:94:54:33:ce:bc:2c:be:06:3a:e3:e4:
8d:21:61:61:ac:5b:a5:ea:8e:dc:06:89:ce:f5:6c:2e:0b:50:
07:08:de:2d:2c:89:5e:de:67:5a:0f:22:05:dd:06:8a:d5:96:
bc:4c:88:13:b8:be:6b:96:bc:10:86:19:5a:64:ae:79:a8:50:
b9:db:45:82:0e:58:c6:22:ac:06:ec:d0:9d:b1:a5:92:8e:b9:
e8:5c:e7:ed:5b:0f:2b:a8:48:57:f6:c6:19:c9:73:30:41:64:
0a:ea:14:c8:9c:ca:1f:fa:c4:18:34:d9:79:2d:e6:03:2e:7a:
11:23:8f:5b:13:f2:af:ea:4b:de:d3:27:fd:8b:9c:08:69:8b:
e5:5f:3c:9d:f2:75:2d:84:11:53:a6:87:b8:19:13:48:5f:d3:
b6:4f:a5:43:67:e6:b8:39:ab:92:5f:fc:b4:d9:12:2d:23:86:
12:c2:86:81:5c:07:2b:f6:81:7e:d4:47:4d:00:ed:7b:80:50:
46:44:f8:9d:ee:94:06:52:ba:50:d5:7e:60:9d:9a:e6:38:d5:
db:4c:f8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:01 2025 by rpki-client