Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/105a04e3-5d90-3049-8f72-c4c717595af4.roa
File: 105a04e3-5d90-3049-8f72-c4c717595af4.roa (raw, json)
Hash identifier: Jvik+wXvyE7uNMbZhMgaNmFzTquTwuxPLOMrZj8W+as=
Subject key identifier: CF:B9:37:B3:52:A5:6D:E1:03:0A:7C:41:7A:15:A7:53:FF:75:29:8A
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584897708B4E529B93F529952900
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/105a04e3-5d90-3049-8f72-c4c717595af4.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 26480
IP address blocks: 199.202.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:8b:4e:52:9b:93:f5:29:95:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=20023156-7cb2-4ff7-ad3a-ae66ef2fe05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9f:a9:e5:03:6e:de:50:90:d9:cd:71:dd:17:
fa:de:a9:47:8a:9b:97:0c:84:cd:90:48:c2:6c:ef:
f9:34:c2:34:30:23:2a:0e:c9:00:a7:37:cd:de:b3:
96:0d:e7:5f:07:e0:ee:b6:51:57:0c:5c:4c:f5:02:
17:3b:3c:9a:19:3d:dd:7e:07:68:e5:7b:cf:5c:67:
f0:4c:4c:50:6a:c7:e5:39:a0:37:0f:c8:46:b5:76:
28:86:57:5b:eb:21:a6:ae:a3:12:4f:6a:07:cd:01:
2d:75:5c:96:67:ff:d0:2c:14:fe:91:4f:f4:65:d8:
e5:d7:ff:b5:d3:a7:80:48:4a:8f:8e:8a:69:b2:d4:
4f:eb:51:72:58:4f:e1:82:52:c6:c2:66:44:2c:e2:
e1:14:c3:4c:9b:38:a4:d8:b4:c6:78:4f:02:e7:e2:
93:6e:84:30:78:5f:00:b2:ed:32:c7:53:a8:a2:b6:
59:e3:44:e2:6a:39:32:9f:e3:5f:14:ee:ec:3f:7f:
86:ad:b9:32:ef:63:01:cd:46:7c:d9:49:3e:34:45:
2a:9d:26:14:8c:0c:28:79:77:21:6d:1e:f5:41:6d:
25:c1:40:c1:1b:ad:78:1a:ac:19:41:76:28:64:eb:
9c:71:2c:19:20:26:8f:bd:2c:fe:74:a1:a8:bb:0f:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B9:37:B3:52:A5:6D:E1:03:0A:7C:41:7A:15:A7:53:FF:75:29:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/105a04e3-5d90-3049-8f72-c4c717595af4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
199.202.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:f2:65:36:f9:e8:26:fc:48:4d:21:ba:cb:8d:0b:f2:0b:5c:
52:54:d9:ad:c1:b0:fe:d9:0a:ae:a9:06:a7:a9:51:6f:2c:b1:
b1:fc:b4:a9:ee:61:61:95:d1:9a:88:e2:d5:73:62:2b:30:78:
a1:3b:62:a1:40:19:20:24:20:6b:6a:61:6e:98:8a:d4:64:c0:
de:43:19:d7:1b:06:f7:a5:5e:98:e5:c3:f7:ba:29:ba:17:ff:
76:bf:fb:26:15:86:82:39:16:9d:72:22:de:21:78:ad:77:39:
06:2e:07:23:9e:7d:53:97:93:36:29:59:3e:1a:fc:0b:14:8c:
ed:e0:49:96:3c:f6:d7:14:6d:d9:02:99:e6:d4:0f:8b:b7:cf:
49:df:bf:c5:56:3f:50:55:07:d0:ed:e6:dc:c9:8a:ed:c0:bb:
a4:30:79:d1:6d:33:dd:34:82:18:f4:d1:a7:1a:77:fa:a3:be:
a0:f2:11:e7:cc:63:86:a1:bb:3b:df:2e:44:cd:4f:7d:01:bb:
07:b0:fe:99:77:8b:82:cd:90:a4:ad:e6:51:09:e2:06:54:fc:
a9:96:1b:78:51:15:83:2d:2d:ce:07:f7:9c:9f:8e:96:f5:c7:
7f:4b:c6:fc:a1:f5:2b:6b:de:4b:43:0a:f8:e6:1f:ff:37:c5:
b7:3c:c3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:19 2025 by rpki-client