Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/ffb605d8-c1f4-3f43-909b-f2f4a92c492f.roa
File: ffb605d8-c1f4-3f43-909b-f2f4a92c492f.roa (raw, json)
Hash identifier: T/ivoZkwcM51DkqQBAhaPEImwIT+wZpHpxShOkEBXh8=
Subject key identifier: 55:F0:4B:79:B4:31:D2:80:C9:A6:22:15:3B:25:8E:A6:A4:68:ED:17
Certificate issuer: /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial: 010D0C9F43285848A13618F554150448ACA28AA0
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/ffb605d8-c1f4-3f43-909b-f2f4a92c492f.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 393981
IP address blocks: 199.175.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:18:f5:54:15:04:48:ac:a2:8a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=6007d3f3-8264-48eb-aa17-8f5a9c141052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:40:6d:29:d6:07:1f:1f:2a:70:bc:2a:a1:c7:
0e:dd:64:1a:fd:60:21:d0:a6:34:f8:da:65:90:03:
a5:1e:fa:82:f8:9a:d5:9f:8a:03:70:df:3d:22:6b:
5d:04:96:3e:56:19:32:61:73:d5:76:8f:48:8b:bc:
1e:f7:af:88:b2:cc:ff:c6:84:6c:d4:08:09:76:db:
01:88:50:2e:76:e9:ee:37:ee:23:34:f2:5c:4c:cb:
15:5f:6c:4e:3c:b9:48:50:e0:51:76:1f:15:cf:b9:
a0:bc:88:49:76:5c:24:a6:9a:7a:b9:bf:2e:70:6f:
0f:ea:da:48:af:c5:90:30:11:02:8a:78:66:7e:54:
6f:a8:7b:c7:0e:89:ae:33:d8:52:da:dc:07:e7:95:
c5:10:8e:63:30:fa:9c:a7:38:57:2b:1a:59:59:0a:
fc:8d:db:7e:28:11:d7:a8:9a:92:d3:92:01:7e:d9:
de:48:b7:1f:8f:19:16:f2:2d:3c:65:df:43:ca:99:
ce:79:ff:71:8b:d4:93:5d:08:c6:10:14:5a:01:3f:
4a:30:0f:db:15:f1:bd:74:77:7f:e4:51:3e:4b:e7:
c9:1b:5d:55:12:24:a7:8f:d3:b0:87:0c:e9:3f:9b:
7d:33:0e:d5:0e:45:87:12:70:d8:f6:a5:bf:00:1f:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:4B:79:B4:31:D2:80:C9:A6:22:15:3B:25:8E:A6:A4:68:ED:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/ffb605d8-c1f4-3f43-909b-f2f4a92c492f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl
X509v3 Authority Key Identifier:
keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
sbgp-ipAddrBlock: critical
IPv4:
199.175.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:3e:4b:37:ce:2c:c2:8d:38:ba:0e:7a:57:32:f0:a1:17:bf:
8c:60:e2:2a:6f:54:43:e9:25:db:35:b2:4a:35:7e:39:a5:17:
b5:a5:b1:97:14:e0:52:04:f1:52:61:1c:08:a6:82:ad:36:e6:
fe:ba:f9:a8:15:ac:87:f3:1a:bb:01:82:ec:4d:37:01:4f:fc:
e9:a8:63:98:cb:fb:ee:a5:13:e1:a3:6d:ba:1b:dd:59:de:a8:
b2:f8:9d:58:84:ab:6b:3d:58:68:cd:e1:5b:18:c8:6e:07:08:
cf:0c:57:57:eb:91:32:e7:97:4f:bd:af:db:ec:eb:74:04:ee:
a1:8a:d4:ef:5b:8f:a8:23:ba:7a:84:fb:d6:c7:34:59:0f:71:
91:8d:72:fc:8f:34:6e:3b:49:09:24:38:af:01:72:ae:38:b7:
2d:7d:dc:c7:d2:84:f6:9c:bb:5d:08:b5:6d:71:19:8f:73:d0:
1a:f8:00:f9:f2:5b:bb:8e:32:08:6c:77:d6:47:c7:f0:f6:4f:
7f:04:67:3d:d4:ac:fd:0f:e4:01:cc:c9:58:24:86:b4:77:36:
d3:9b:b0:ed:a3:10:63:e9:82:a7:6a:fe:8b:bf:25:24:fd:d6:
bb:c3:f7:58:74:d1:d4:c2:b2:8e:bd:2f:f5:a7:9a:ba:85:a5:
e2:83:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:58 2025 by rpki-client