Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa
File: 1b54a3eb-c57f-38c6-85bb-063509906029.roa (raw, json)
Hash identifier: xm6vOQf/dZXnoEm9YkFSWY8ReuM9LpHNmr/hSDz1nF0=
Subject key identifier: 72:32:F4:91:32:0E:2D:F4:5C:CF:8B:0D:0C:EF:43:17:83:5E:E8:EF
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858494B642269F7F7CDFBBF132580
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 11404
IP address blocks: 199.27.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:22:69:f7:f7:cd:fb:bf:13:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=11ae94dc-5ec7-4bc9-95dd-eb0ed5acca7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:e6:e7:a3:2e:dd:81:cd:b7:fe:cf:f4:e7:
5b:d7:06:3a:5a:29:b1:39:38:ee:2b:d8:2d:b7:76:
5b:64:93:37:40:64:84:84:32:57:8b:4a:f3:6a:8d:
7a:00:15:19:42:33:22:8d:c1:dc:84:4c:de:63:a4:
cc:f5:8e:22:d0:7d:a4:bb:03:c7:c6:03:34:f3:37:
c2:e6:54:e6:5c:f5:71:b1:52:f0:6a:83:f1:34:7f:
ec:1e:5b:08:78:2c:99:9f:e6:be:90:f5:71:7a:f9:
62:c1:02:7a:88:29:a4:cd:3d:88:76:49:f2:af:e3:
fd:0c:37:1d:af:ab:cf:38:99:97:6a:18:a6:5e:6a:
9c:d4:cb:50:60:d0:92:61:87:1d:d5:48:43:92:9c:
7b:56:dc:2f:9c:b9:bd:44:aa:45:c0:84:9f:87:4f:
f6:6d:3b:71:67:f2:24:63:0a:a5:d1:18:6e:d6:00:
bb:dc:64:11:41:b7:7b:19:ae:3a:ce:05:e0:b1:9f:
06:92:7e:15:9d:b1:f6:f7:b6:e7:47:9a:b6:2e:77:
68:67:6c:5b:cf:96:cd:d7:5b:4b:b8:24:34:8b:f6:
90:f5:88:63:71:ff:6c:ca:fc:b5:62:26:f9:f4:45:
8d:37:e5:5e:ab:48:ac:80:52:05:f8:92:e4:b6:6e:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:32:F4:91:32:0E:2D:F4:5C:CF:8B:0D:0C:EF:43:17:83:5E:E8:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
199.27.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ae:9e:90:14:9b:a5:02:9e:6d:9a:39:c7:54:2f:a6:9c:17:
c3:bf:1a:08:40:ec:d3:da:bd:fc:57:76:0b:53:6b:dc:37:7a:
d2:4b:f6:2e:86:c8:76:9c:79:79:d9:ec:74:45:1c:cc:a2:e0:
28:0b:20:4c:1c:1d:c7:ad:76:c6:e7:50:d4:76:7f:64:fb:bf:
c5:bc:80:e3:ef:67:24:25:29:dd:08:03:ed:be:53:33:24:91:
4e:af:63:28:cf:6c:b7:71:d1:52:84:08:61:62:d6:e4:a1:11:
70:13:77:28:e2:b0:5c:da:9f:c1:86:4e:71:6b:ba:70:ca:14:
7f:59:97:82:75:75:a1:c4:1f:05:c6:e4:04:88:02:b1:19:13:
4e:c2:ee:2b:53:60:4f:4d:50:40:91:aa:33:3d:4e:3c:e6:e9:
29:0b:66:7b:a0:fb:f5:dd:a0:5d:cc:66:08:3a:5b:20:7f:48:
f6:6a:f4:44:bc:59:e8:6e:92:eb:9f:6d:ce:7e:dc:21:ed:94:
60:64:9f:cb:c1:fa:0b:ba:5e:15:83:c7:bf:c1:e1:a1:3e:17:
52:24:d6:07:04:19:03:ae:8b:b5:5a:1d:58:54:2a:d7:51:d8:
e2:98:bd:b3:ea:d9:77:8e:bc:c5:01:95:98:c7:5d:1f:6f:13:
5a:1e:20:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:04 2025 by rpki-client