Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/3b4c08eb-be3f-3539-88e3-467a91cea7d4.roa
File: 3b4c08eb-be3f-3539-88e3-467a91cea7d4.roa (raw, json)
Hash identifier: Ld+bwey+K0GOdxNctn0I9GpyKxle7tVJAwV60E7c4B4=
Subject key identifier: 50:93:EC:97:AB:FA:DB:CA:27:EF:1E:18:32:22:1C:FF:1A:09:F0:BB
Certificate issuer: /CN=8083c5d7-ca5a-491b-96c7-83d4c0a565a7
Certificate serial: 010D0C9F43285848C95451D6515A0F22AFCE5940
Authority key identifier: 5E:B4:1C:10:B0:9C:06:6D:DE:DC:52:2D:FB:8A:FB:95:75:E7:07:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/3b4c08eb-be3f-3539-88e3-467a91cea7d4.roa
Signing time: Wed 05 Feb 2025 22:54:16 +0000
ROA not before: Wed 05 Feb 2025 22:54:16 +0000
ROA not after: Tue 06 May 2025 21:54:16 +0000
asID: 36086
IP address blocks: 199.6.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:54:51:d6:51:5a:0f:22:af:ce:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8083c5d7-ca5a-491b-96c7-83d4c0a565a7
Validity
Not Before: Feb 5 22:54:16 2025 GMT
Not After : May 6 21:54:16 2025 GMT
Subject: CN=0a00e4e5-45b8-43aa-80ec-faa36e5c3d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:52:21:42:2d:23:d6:25:e6:e5:f4:b4:ff:
83:31:f7:70:e7:f6:6a:4d:cb:a4:e3:c1:ad:94:d0:
1f:54:25:3e:9c:52:5f:09:7e:cd:6a:ba:85:44:08:
ac:e9:6f:f5:46:3f:2f:53:3e:5b:b4:d1:09:68:eb:
64:16:fa:12:a1:16:22:94:24:bc:7f:bc:8d:ea:d7:
26:5f:b6:7a:ad:ce:e5:b2:56:93:f3:d3:48:92:78:
51:a4:ba:dd:77:0b:45:c5:7f:75:36:97:bc:2c:1e:
4d:27:d2:9a:35:84:64:45:32:50:3d:e1:c4:cb:f2:
7b:7d:94:87:37:f1:4e:96:c0:ca:7a:f1:10:d3:01:
fc:1d:00:70:3b:40:0d:c3:5e:24:0b:8e:9b:b8:52:
83:6e:d6:b3:51:aa:19:40:64:81:ac:4a:da:1d:ac:
d6:9d:9c:aa:28:70:64:8e:31:83:93:a0:21:34:9d:
a8:f0:08:85:18:b7:d2:82:df:34:c1:6f:49:d6:56:
63:f5:f1:a8:47:0f:da:e8:02:0a:cc:fc:91:d2:45:
ff:a6:ed:2d:b7:17:59:85:5e:67:94:17:7e:27:cb:
48:8f:e1:5d:56:12:97:10:f1:9a:7a:c0:a5:53:50:
42:48:de:21:21:61:55:ab:8d:9d:41:e5:c8:d8:50:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:93:EC:97:AB:FA:DB:CA:27:EF:1E:18:32:22:1C:FF:1A:09:F0:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/3b4c08eb-be3f-3539-88e3-467a91cea7d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.crl
X509v3 Authority Key Identifier:
keyid:5E:B4:1C:10:B0:9C:06:6D:DE:DC:52:2D:FB:8A:FB:95:75:E7:07:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.6.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:b5:82:68:69:9d:5c:2b:df:fe:ad:ee:54:07:a4:38:c8:2f:
74:6c:ac:13:3e:b0:c6:1d:48:8d:46:a4:8e:b5:7f:6d:a0:e6:
a8:7e:ae:4a:da:14:f8:93:55:41:69:b7:26:74:fc:52:33:6e:
dd:11:ac:42:32:e6:e7:ad:fa:22:a5:1d:18:73:dc:86:6f:cb:
c6:8a:3f:a4:71:b3:03:99:f5:64:3d:1c:7b:51:10:8e:1a:44:
70:df:49:a6:63:6e:a4:9e:ce:14:ed:ce:68:6b:3e:64:ca:7d:
e3:85:12:89:9a:29:16:86:96:94:f1:8e:65:13:e0:77:77:8a:
c5:e2:01:12:c6:14:36:0b:39:86:53:ae:0e:ce:07:06:31:8a:
58:9e:fa:97:10:a3:b8:8b:19:71:0e:80:37:33:bc:aa:b9:e3:
d6:c0:2e:ed:9b:1e:1f:af:88:f4:88:41:45:17:25:5c:68:7b:
64:ff:6c:7d:28:c5:f7:37:82:60:91:d4:05:1e:89:ea:72:94:
a7:61:6c:21:78:44:d2:38:e0:3e:f4:df:4b:41:e1:aa:0f:5a:
3b:83:13:29:6d:98:c1:b5:5e:34:e2:60:5a:48:80:df:9a:ed:
ff:37:0e:aa:6d:91:00:6d:8a:8f:61:df:30:21:f3:9c:ee:7d:
fd:0a:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:06:51 2025 by rpki-client