Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/60dd90d5-8fdb-3f0b-a2f6-d039a33a51cd.roa
File: 60dd90d5-8fdb-3f0b-a2f6-d039a33a51cd.roa (raw, json)
Hash identifier: yfgWRS1Z6n7JfhO/I8KMkjEVi0jbizKiWeMURbyK2SA=
Subject key identifier: 2D:09:78:1C:4F:D2:A2:D5:6E:A5:22:C6:06:9A:CA:8D:21:22:F0:A0
Certificate issuer: /CN=7801f48a-31fe-43fd-b9d7-b370febfe411
Certificate serial: 010D0C9F432858494E663722EC3589F833048C00
Authority key identifier: F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/60dd90d5-8fdb-3f0b-a2f6-d039a33a51cd.roa
Signing time: Tue 25 Mar 2025 14:52:50 +0000
ROA not before: Tue 25 Mar 2025 14:52:50 +0000
ROA not after: Mon 23 Jun 2025 14:52:50 +0000
asID: 399007
IP address blocks: 199.247.176.0/20 maxlen: 20
199.247.176.0/22 maxlen: 24
199.247.180.0/22 maxlen: 24
199.247.184.0/22 maxlen: 24
199.247.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:66:37:22:ec:35:89:f8:33:04:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7801f48a-31fe-43fd-b9d7-b370febfe411
Validity
Not Before: Mar 25 14:52:50 2025 GMT
Not After : Jun 23 14:52:50 2025 GMT
Subject: CN=692aef61-9903-4f3b-b49b-d8dbc74a4270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:1f:d2:34:32:d1:8e:c3:27:71:e4:c5:12:
20:3d:72:35:ea:51:24:56:3f:3a:43:e6:fc:ff:32:
d4:22:31:86:71:df:84:32:f4:71:57:b4:d2:eb:a9:
83:44:c4:3e:20:64:14:f1:83:ab:6e:13:f7:88:f3:
55:7c:df:44:96:f0:04:31:75:e6:72:ff:a2:56:af:
c5:a0:f2:23:a4:a4:5a:92:65:ec:7c:2b:6a:4f:c1:
16:84:e8:3d:42:66:7b:a1:e3:d2:36:19:db:d7:1a:
8d:dd:ec:f9:0b:2f:d9:f8:94:67:8c:bc:af:73:84:
c5:df:d5:75:de:2a:f4:0c:12:bb:55:80:cc:5d:64:
33:3c:ab:72:74:60:9b:3c:a0:3c:aa:33:b4:0d:8f:
55:af:06:d4:74:bd:ab:ad:91:aa:9a:73:76:48:fd:
fc:88:6b:73:5c:24:43:61:80:3a:c7:cf:80:46:cc:
89:ab:fc:60:6b:e8:fe:24:be:0f:6b:08:b3:24:10:
cf:cc:77:7f:8a:0f:50:94:ce:83:76:e4:56:ad:d7:
71:ad:2d:ff:4e:9e:15:c5:7c:f3:f6:5c:c5:aa:47:
97:1b:c4:1f:54:cb:ee:64:02:d7:4d:55:7a:ab:82:
48:ee:10:9a:b0:ba:77:af:d3:75:52:10:5e:2f:94:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:09:78:1C:4F:D2:A2:D5:6E:A5:22:C6:06:9A:CA:8D:21:22:F0:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/60dd90d5-8fdb-3f0b-a2f6-d039a33a51cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl
X509v3 Authority Key Identifier:
keyid:F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
sbgp-ipAddrBlock: critical
IPv4:
199.247.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:c7:d3:e4:ba:7c:60:02:06:fe:4f:69:5b:21:b2:46:59:59:
02:1e:87:c8:05:0e:18:88:f7:0a:23:fd:71:ba:e1:bb:c9:01:
26:52:3c:a2:90:53:25:05:ae:87:85:c9:ef:b3:0e:24:f0:89:
ec:49:78:89:a8:40:47:52:33:86:91:00:27:8a:24:7a:b5:a4:
0a:e9:84:f9:6e:f3:c5:bf:1b:87:88:94:34:41:21:9e:c0:5b:
bd:c7:54:12:8e:ee:78:b8:a9:16:d3:fe:7b:37:50:95:ac:f6:
de:7a:fc:2a:39:54:82:c3:c0:92:5e:fa:59:03:eb:9d:a8:9e:
f7:9b:99:74:cf:f1:8c:9b:85:5b:40:19:d2:9c:eb:0c:75:41:
5f:24:6e:ed:62:d1:a6:be:d2:3f:e0:4b:d5:0f:3c:73:fa:13:
91:c4:3b:06:58:7d:3f:34:6d:4d:e7:80:a0:18:af:95:36:84:
61:e5:87:50:a7:8b:22:32:34:58:4b:5b:91:68:f4:0e:9b:ff:
79:10:d5:ca:9d:2c:29:0e:3f:31:7e:af:a8:ac:60:2f:82:c0:
f5:a5:63:4c:ef:55:bf:2c:3f:c9:6c:ca:04:08:e3:62:49:72:
ad:79:fa:95:56:1b:de:69:ae:15:17:27:50:da:42:4f:e4:b6:
9f:9c:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:55:41 2025 by rpki-client