Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa
File: 4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa (raw, json)
Hash identifier: fArNvse4V3nPr9/DNWk5d9yA0OR9ZrU3+lobkvm7k3c=
Subject key identifier: 82:CD:D3:F3:C0:AD:89:26:56:3F:50:98:4A:6E:93:5F:CB:91:93:5A
Certificate issuer: /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial: 010D0C9F43285848EF6142E438E3A16F49395C80
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 46632
IP address blocks: 199.47.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:42:e4:38:e3:a1:6f:49:39:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=0d42d14e-063d-425a-b2aa-217df23ca7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:ab:f5:e9:7f:09:e8:c8:6f:67:6f:f1:c5:
2c:85:eb:c4:7a:69:a2:d9:f1:32:96:98:f1:1b:b6:
04:36:3a:7b:9e:bb:39:47:c9:5c:37:f1:b5:a6:6e:
76:d2:cb:1b:e8:20:87:00:ef:9b:47:c4:68:c7:77:
2f:fa:c6:e7:b8:2e:a8:06:91:7b:9c:15:b8:14:07:
f7:43:32:f4:cd:ba:9b:00:f2:9d:4e:17:e2:6d:13:
37:bb:8d:96:5f:84:dc:3f:55:3a:b3:d4:60:68:3b:
da:6d:c1:b7:2b:64:fc:27:c9:e2:0f:f9:97:e6:c5:
26:08:17:d0:9b:2e:73:f9:ed:7f:ae:f4:39:6a:79:
df:98:8d:b9:c3:cc:41:fe:0b:36:17:ed:85:0f:ba:
9a:08:e3:f0:5f:ba:5d:ed:58:7a:cc:bf:80:ec:9f:
f1:c3:5f:8a:4c:51:6b:94:10:7b:0c:03:28:f0:75:
81:da:30:63:49:3d:dc:4e:05:9b:18:74:41:eb:0b:
73:96:7d:39:2b:99:6b:56:26:6a:8f:9a:06:b6:2f:
50:be:f8:3d:f9:e8:4f:c9:da:5f:27:6f:19:67:8f:
62:51:d0:ba:c8:86:81:e3:cd:15:a0:35:cc:54:13:
f9:79:77:92:08:e2:a3:09:bb:ee:8d:fd:62:3c:5d:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:D3:F3:C0:AD:89:26:56:3F:50:98:4A:6E:93:5F:CB:91:93:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
X509v3 Authority Key Identifier:
keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:d2:5e:58:df:4d:35:13:e3:8f:e7:44:0a:c2:03:e1:a1:f0:
39:61:50:91:fc:1f:08:48:42:9b:60:b1:ec:e8:60:c1:3f:ba:
c0:fd:82:36:9c:aa:a3:d7:94:60:49:e9:4c:0f:0c:b6:71:28:
28:2c:f9:d7:1a:22:5c:1e:e1:9f:3b:de:59:4a:51:27:dd:09:
5c:4a:d0:3d:e8:1a:93:b8:83:8e:c4:7d:90:b3:a2:3d:bd:e7:
b6:56:db:24:8b:bf:ec:34:3c:98:75:20:ea:09:b1:5e:fb:8e:
4a:e9:5c:a5:94:85:ba:7c:a2:f3:db:ec:25:e0:40:d0:0b:f8:
3d:ff:1e:87:a3:18:b1:5f:fd:d8:b0:e7:13:d6:f2:0e:36:80:
5f:c2:4c:ee:bb:bd:aa:96:55:2f:76:e8:87:c8:36:f7:11:5b:
ac:91:f5:c5:a3:62:76:d9:ed:54:a1:3b:c2:1b:eb:57:ab:aa:
a3:99:d6:be:29:62:74:eb:ed:7c:6c:de:e0:35:5c:69:9f:f1:
21:fe:83:97:bf:b3:aa:3d:a8:e2:91:2e:91:5f:bb:48:97:70:
c6:c3:71:58:60:d4:8e:bf:00:b6:ba:82:06:d6:c1:6c:ee:00:
61:df:7f:e5:06:eb:dc:7c:f6:31:68:5d:c3:af:60:24:ef:a5:
cd:0a:94:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:49 2025 by rpki-client