Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa
File: 3f9ad2a5-8547-3650-a790-25df90ed3852.roa (raw, json)
Hash identifier: kCPCLx0FmMUO+bqh2i7qv1j7kXf7H+ezrJXWGIRSFT4=
Subject key identifier: 2F:08:F0:4C:C8:35:62:C6:E8:A9:CE:C1:9A:57:C9:27:62:D0:F7:60
Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial: 010D0C9F43285848DD3BA6E89EAA30FA17712CC0
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 395807
IP address blocks: 199.60.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:a6:e8:9e:aa:30:fa:17:71:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=47b20eed-df7d-4c45-a393-3c53bfe704d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:99:f3:d8:89:06:81:dd:2c:60:f6:e9:61:
cf:b9:2a:32:b0:01:ba:fd:52:99:07:85:a1:a3:13:
d5:00:aa:48:c6:e1:33:16:e7:09:4d:2f:eb:ba:af:
ed:35:75:e8:9a:40:12:9d:84:16:db:d0:0a:5c:32:
e8:53:03:81:cb:69:82:48:e9:0b:7f:0d:04:02:29:
6b:95:5b:73:79:25:cd:63:94:81:ad:7b:96:5f:15:
1e:75:f9:40:50:6d:f7:b6:34:9f:13:7d:1a:be:c7:
85:1f:23:69:9d:4b:e0:98:d5:3e:d6:9f:e9:d2:72:
32:f6:17:99:a2:59:df:2a:b9:ef:ff:6f:4c:59:1b:
92:0c:81:fb:4f:77:f3:f5:af:93:1c:35:fa:6f:36:
a3:37:29:43:08:23:8e:a1:04:7a:d7:38:29:a2:c9:
5e:df:bb:4d:14:f8:e0:34:1f:d7:f3:27:ec:87:d3:
1f:e0:66:04:37:92:f1:3a:28:39:73:8a:04:a3:a5:
d4:b6:a8:cf:d9:19:ef:a2:5f:ef:98:d0:9b:95:af:
15:85:1b:77:ed:59:67:43:3f:69:a5:bb:79:54:ed:
fb:a3:10:b2:76:32:d6:ab:a6:6f:3c:ff:d1:75:2a:
d3:8e:89:cc:5b:19:00:c2:c2:8e:49:23:20:5c:07:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:08:F0:4C:C8:35:62:C6:E8:A9:CE:C1:9A:57:C9:27:62:D0:F7:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
X509v3 Authority Key Identifier:
keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
sbgp-ipAddrBlock: critical
IPv4:
199.60.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:53:ff:c0:72:49:17:7d:9f:af:7f:a2:10:bb:66:10:50:25:
a3:df:dd:df:5e:04:40:cc:e7:4a:d0:49:ed:0e:d6:92:07:0c:
07:43:05:f2:d8:e2:16:7d:57:89:49:c3:3b:34:ef:23:2e:b6:
a3:61:17:2d:38:20:13:88:ef:be:4d:ed:a3:a6:a3:ea:b8:6d:
9f:b1:7b:57:a6:34:7c:96:df:e0:a9:5f:20:79:e6:a4:6c:2b:
5d:4c:80:e0:11:71:fe:83:c9:b6:09:d2:2f:0f:9a:2b:d8:96:
d0:32:f1:d0:db:1e:2f:5f:80:85:80:12:8d:f8:9d:9b:e0:7f:
7c:cc:f1:4e:76:6e:e8:2a:fb:2c:75:aa:da:c6:69:e7:62:4f:
8c:dc:d2:19:c1:4e:c7:4f:c3:8c:12:b6:d4:16:4d:3a:a5:78:
72:ae:98:20:0b:ed:c8:8f:b8:05:9b:a8:54:31:f2:51:aa:91:
4c:13:56:97:20:23:dd:c6:ca:e4:68:9d:ab:9a:e2:5a:25:99:
51:26:69:50:bb:10:f9:55:8a:28:af:78:ea:55:28:cd:ab:b6:
89:3d:18:06:80:c4:e0:39:80:e0:a8:ce:23:fe:fd:30:63:6a:
3c:98:0c:62:26:77:5b:69:5b:35:33:43:60:48:28:af:99:ca:
bf:20:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:25:02 2025 by rpki-client