Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa
File: d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa (raw, json)
Hash identifier: Fb1EelvvawihdCpBUQJkpZyrG0ku2jgi6jAthD9jL6U=
Subject key identifier: FC:C7:CF:7E:9E:E1:A0:25:E0:15:E8:78:B4:4B:8A:AD:A7:96:59:1C
Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Certificate serial: 010D0C9F432858494B64151799D7050AE0F41940
Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 43685
IP address blocks: 199.91.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:15:17:99:d7:05:0a:e0:f4:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=39469400-fdfb-4be3-8ec6-16616ccec509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:52:0c:9e:e5:06:6a:1d:d4:02:40:0e:aa:
9b:b9:38:99:bd:1c:3b:70:75:ac:23:af:49:33:1f:
d6:ec:56:fe:99:47:b1:b1:6e:98:04:38:72:21:7e:
9a:90:4a:ca:3c:bb:49:9d:01:30:22:68:16:ab:e5:
14:bd:2f:f5:06:9a:d4:b5:4d:54:5b:55:01:e3:65:
a2:ac:7d:a0:6a:f7:ff:24:55:fd:2b:af:3a:0d:f4:
62:a2:c3:26:50:9d:13:96:7c:a9:9d:0d:ce:8a:61:
d3:f6:66:db:3b:a6:7c:ab:84:5c:80:a2:27:1e:04:
39:78:32:de:64:ac:9c:16:88:9b:97:41:e6:cd:7e:
96:b3:73:bb:a5:80:c7:7f:32:cf:c1:3b:12:e5:88:
48:29:eb:f6:a8:e9:87:16:3c:50:6f:1a:59:7d:d1:
8f:5d:c0:da:e3:dd:70:0e:46:ad:f7:b2:28:b6:64:
2f:4c:17:46:25:f6:5b:55:05:00:c6:35:3c:51:14:
81:64:2c:b4:d0:83:49:e1:2b:fd:22:1c:66:88:c3:
2e:9d:ab:2f:22:ab:ac:72:33:42:20:2a:29:13:a0:
e5:e2:a8:d0:e3:c7:de:35:e6:2c:94:41:fe:a7:ce:
76:1b:75:07:8f:c8:91:99:68:81:f1:7d:2d:dd:63:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C7:CF:7E:9E:E1:A0:25:E0:15:E8:78:B4:4B:8A:AD:A7:96:59:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl
X509v3 Authority Key Identifier:
keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:29:6e:d1:db:10:40:b8:a8:91:8e:19:55:b5:36:76:ab:7c:
f1:0e:18:d1:ad:66:66:b5:fe:18:b1:9d:16:cc:2e:5b:d1:32:
44:b1:49:9e:8f:00:11:22:e0:6c:77:1b:9a:cb:18:70:92:22:
5b:ec:35:b9:ec:29:2f:aa:f5:f6:43:4d:97:d0:ae:47:b1:4d:
11:e1:f6:09:5b:66:a4:b2:8d:d4:43:56:74:82:79:9e:fa:af:
03:39:22:85:e1:6f:b1:1f:60:c0:35:01:2d:b9:de:ff:af:4c:
dc:7e:d0:5e:94:09:1e:83:a7:e9:03:ad:5c:00:d7:ae:8e:2e:
08:7d:98:03:3f:15:cc:65:85:45:7f:15:de:b6:e1:5d:a8:99:
04:ad:79:29:0a:67:bb:29:f4:33:86:3a:75:40:3b:14:86:de:
3d:7a:e1:5a:6c:5a:d3:c0:c9:37:fa:d0:f7:8c:c3:1b:f8:eb:
56:ea:30:29:33:05:96:6d:c7:9d:f0:f2:5c:d0:11:92:67:5a:
c6:a6:fa:6e:a8:b4:11:0e:6a:6b:a7:2c:f7:d8:2d:cc:ba:d1:
00:e0:c9:ee:5b:f3:76:a8:b0:6e:5c:b3:7c:8c:ed:5a:34:9c:
a0:46:4f:ab:14:a2:34:69:8f:a9:1e:9c:35:aa:b1:1a:68:d4:
e3:a8:a7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:46 2025 by rpki-client