Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa
File: 611240e0-65a6-3754-a0a6-84e5e23b35ff.roa (raw, json)
Hash identifier: X4mAF478bDIT0X6AVoiJVzl1qEA1WAuB+LSs6GcakVI=
Subject key identifier: AA:3E:39:0F:4D:E8:D3:E8:D1:21:B0:77:04:B4:13:91:63:45:90:C0
Certificate issuer: /CN=3d7c7699-15af-4ea4-8825-93e2f116691f
Certificate serial: 010D0C9F43285848AF2B85C7B78B27FD72188B40
Authority key identifier: B0:85:4C:6A:84:A4:29:6A:40:D3:2B:12:A3:B9:68:99:26:EE:02:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 376
IP address blocks: 199.84.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:85:c7:b7:8b:27:fd:72:18:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7c7699-15af-4ea4-8825-93e2f116691f
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=822f2fa8-4872-42f9-aa9e-a59071ba86c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:52:8f:c8:12:29:db:5a:9d:6a:93:ea:85:
0f:ba:c0:36:de:26:e0:c2:98:f7:36:fb:9c:b5:75:
3c:ea:e3:72:3b:75:bc:86:78:b8:3d:44:60:b1:71:
29:c5:f7:4b:a8:56:54:48:3d:db:4b:88:09:fc:ce:
54:af:be:1c:17:81:55:ab:d5:a2:12:e0:30:2a:3b:
0d:91:eb:3a:7e:63:3b:59:62:e6:c7:35:a7:ee:95:
b2:f4:89:28:98:fa:75:61:ca:56:17:8f:2c:65:0a:
a1:bc:b7:d4:cd:fa:a1:5c:0d:ee:75:83:70:3b:19:
5b:e7:26:fa:69:14:be:bd:a7:6f:f1:33:af:ad:65:
68:69:a0:ff:35:7e:c6:93:a0:80:58:dc:db:ea:74:
63:36:09:fd:12:04:5a:36:06:e1:4e:e8:f5:97:f3:
db:3d:47:5a:ba:a7:fb:f3:62:a8:25:ae:30:8e:91:
dc:39:a7:b1:2e:89:df:c4:a6:d9:f2:3f:52:fe:ca:
24:5d:da:07:97:de:a7:fa:b5:56:40:1f:9b:ee:60:
1c:72:58:ee:ad:83:ef:1a:39:11:63:e9:4a:90:22:
cf:1e:d6:73:9a:6d:bf:d3:8f:ad:ad:4f:36:ee:bc:
f2:46:89:c8:fe:af:04:ef:c8:2d:93:4f:ff:9f:35:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3E:39:0F:4D:E8:D3:E8:D1:21:B0:77:04:B4:13:91:63:45:90:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/3d7c7699-15af-4ea4-8825-93e2f116691f.crl
X509v3 Authority Key Identifier:
keyid:B0:85:4C:6A:84:A4:29:6A:40:D3:2B:12:A3:B9:68:99:26:EE:02:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.84.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3f:43:90:4e:0b:e3:ef:b9:6c:13:d9:3a:04:58:7f:6d:c4:
aa:9f:d1:aa:44:63:c4:25:46:f8:3b:00:f7:ef:af:bc:23:cf:
28:1b:aa:c2:c7:78:b2:f2:88:b3:8a:50:d0:46:46:47:d8:59:
1a:27:36:48:49:a6:d5:f3:3c:64:92:eb:6a:c7:c2:6f:9b:13:
01:f5:a4:25:e2:c3:b9:df:5d:a2:5b:12:bb:88:a8:88:d6:78:
6a:a2:74:23:78:72:af:55:cf:f8:e5:f3:e8:a0:ee:d3:80:4a:
40:c5:64:25:43:65:a5:d6:bf:79:6b:d0:96:5e:e3:8e:60:6d:
ef:c7:22:ea:61:04:85:47:b5:56:ed:98:e2:0b:9b:68:44:9f:
c9:89:df:a8:f1:dd:00:fe:65:a1:4a:1a:33:6a:fc:5e:68:3d:
10:20:18:ed:6d:27:44:b3:c5:03:06:d9:95:b1:65:df:08:f6:
cc:83:d0:ac:cf:97:1e:b1:5e:ca:51:9e:22:8d:27:1a:cb:14:
48:c4:65:10:cc:2c:30:5d:78:cd:73:3e:ea:8e:dc:b9:0c:d4:
f8:b5:86:64:fa:c8:e6:06:6a:27:b9:96:5b:15:c5:c1:18:01:
9d:a1:b7:09:15:fa:89:66:17:47:8a:d4:40:28:9a:cc:db:c5:
d2:bc:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:35 2025 by rpki-client