Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa
File: 8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa (raw, json)
Hash identifier: VKq0CZvWgT+3PJ0LF29E5gLwEcymdKMiifG8HhNVtKM=
Subject key identifier: FA:C4:AC:96:69:84:8E:0C:F4:49:91:BC:7A:EB:74:A4:B7:9B:E1:4A
Certificate issuer: /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
Certificate serial: 010D0C9F43285848D21142386D2B4E1121BFAA80
Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 23393
IP address blocks: 199.167.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:42:38:6d:2b:4e:11:21:bf:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=eb0058fb-ab29-41e9-844b-59e05afca670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:af:28:b7:ab:c2:e2:d4:db:9e:c7:57:57:
6e:a4:a4:2c:ac:e8:80:fa:b3:93:14:32:d1:26:51:
ae:c8:f3:e8:b7:af:ae:14:ef:4a:01:d2:ea:73:95:
96:6f:0f:96:a2:43:a7:c9:c7:5a:44:ba:95:8b:99:
88:fa:db:dc:a0:d2:12:a8:c1:dd:0e:69:ad:a9:d9:
3d:9a:24:8c:a1:eb:c7:66:e3:3d:fe:ab:50:5c:b1:
d1:cd:eb:49:ad:0b:bc:43:c5:fa:b6:7f:a3:b5:b9:
d8:d9:1d:70:05:ff:e0:c6:63:70:01:86:74:4e:c0:
8d:4a:67:63:91:54:51:f1:41:2c:28:28:0f:0a:d7:
53:2d:5d:ce:30:c2:32:be:a7:9e:d2:62:05:ec:3c:
e3:4f:b2:db:df:08:f9:c5:37:74:84:0d:cd:88:99:
78:10:75:f7:7e:ab:b6:57:bd:71:10:04:79:73:e6:
d8:4e:1c:db:8c:88:b1:cd:c6:70:c5:af:05:c7:9a:
31:72:a3:a1:e6:4c:63:7a:7d:6f:c5:b1:c1:bf:34:
96:0c:1c:c8:d8:5d:5c:cf:3a:b7:86:95:d5:30:53:
00:31:cc:e4:a5:4f:89:7c:ae:98:76:5c:0d:36:53:
1c:d5:c3:7d:10:97:dc:ae:0a:24:80:f8:36:88:76:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C4:AC:96:69:84:8E:0C:F4:49:91:BC:7A:EB:74:A4:B7:9B:E1:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl
X509v3 Authority Key Identifier:
keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:af:cf:72:a4:8e:af:27:8f:01:36:8d:31:79:95:e6:e1:d1:
ef:3a:ed:6e:63:e4:1b:69:7b:59:3a:10:1e:fb:75:a2:a5:87:
ec:ce:c6:07:dc:69:94:c1:32:ce:c8:42:78:8a:4e:0f:45:de:
eb:ee:13:53:04:5e:e7:6c:8f:a6:69:b7:32:c7:39:f0:01:1b:
95:9a:36:86:5d:f8:78:cd:51:fc:58:29:3a:a9:91:e1:ce:8a:
5e:3e:c1:10:c0:84:56:9a:91:bd:31:c6:03:07:61:ee:aa:55:
65:03:9d:3f:18:20:9e:cf:14:06:15:3b:be:44:aa:aa:cc:2b:
15:a4:e8:a9:f6:42:9f:cd:83:66:2e:94:5a:9b:23:eb:43:3b:
95:ac:4b:a2:b2:2d:d0:13:49:ae:58:50:23:aa:08:e5:ea:1f:
9e:65:7f:db:0b:a8:44:d2:46:ab:43:bb:fc:4f:d2:1f:4e:21:
35:1c:3e:35:f4:43:ee:fa:86:7f:e3:3f:ef:1f:4c:be:d3:14:
36:ff:97:8f:6a:17:ee:c0:fe:82:ef:07:33:64:c4:df:d1:02:
70:2a:9b:ea:22:42:55:ae:35:83:df:55:d8:b3:17:27:01:81:
4e:9d:8c:bf:70:b8:42:d0:ec:e1:93:c7:a6:32:c6:db:f0:7c:
3f:36:f8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:22 2025 by rpki-client