Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa
File: 1f1498a6-2bec-3976-84a6-72c5baa00e10.roa (raw, json)
Hash identifier: q5i/LCjNf2gLqji4YBNPcNum/Xi1epNBMmB7PYs1CIY=
Subject key identifier: 5D:D6:38:36:AC:C5:6F:FA:FD:73:DA:C5:FF:B5:4B:09:FC:2C:27:22
Certificate issuer: /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378
Certificate serial: 010D0C9F4328584957F411AD70B307FDDE7C9680
Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 3855
IP address blocks: 199.96.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:11:ad:70:b3:07:fd:de:7c:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=015dc304-aea1-471d-8c5d-3b1c77ececf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:ba:1a:aa:b8:cd:3f:fd:f4:86:c5:f4:b1:
cd:69:20:ed:ec:f8:ce:20:1e:d6:47:fa:e1:57:40:
10:6a:eb:e7:52:7a:d9:58:11:e5:1a:43:49:9b:ea:
04:a4:47:60:b4:62:f2:23:77:64:77:26:93:45:d7:
49:9b:6f:aa:3e:a7:41:d1:a3:45:d1:59:39:a9:eb:
81:86:d5:9b:5c:45:14:b7:97:f6:a5:ab:2d:4f:b9:
44:b9:25:01:e6:88:de:66:01:dd:84:23:97:a4:92:
ed:b4:99:92:fe:37:4c:12:ec:ad:dc:93:4e:83:2e:
28:86:5f:37:9d:60:18:7a:4d:9e:a0:ab:02:0a:5d:
d8:d0:3b:e3:d4:73:72:33:0a:51:30:12:4d:7a:97:
3c:23:2e:71:1b:d9:62:ce:5d:a9:33:db:64:7c:d5:
f3:f4:d2:09:9b:37:16:f4:58:03:0a:a0:65:47:7c:
87:29:a7:1a:6e:f5:0f:79:c3:11:ef:4d:0a:4e:71:
b5:1b:eb:a5:a2:95:30:e6:0a:70:49:46:f0:e3:dc:
e6:ba:99:ae:d6:52:17:ab:76:bc:ff:a1:f9:b3:78:
ac:53:33:52:91:b1:1e:98:23:21:3e:95:9a:4d:c7:
b4:0a:d7:06:62:b2:44:14:60:50:47:9b:a1:11:13:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:38:36:AC:C5:6F:FA:FD:73:DA:C5:FF:B5:4B:09:FC:2C:27:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl
X509v3 Authority Key Identifier:
keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:f7:6e:5b:c7:d2:38:e0:b7:b2:68:42:e4:46:16:82:c2:a9:
95:cd:fd:11:eb:a3:2b:4e:b7:59:59:40:a4:9d:bb:f7:03:f8:
66:fd:97:0c:fe:30:3b:14:5a:fa:e1:2f:ad:1c:83:87:d8:4c:
3f:35:ff:64:ee:44:79:f1:2e:e1:a5:3b:0b:cd:b5:b5:0e:1f:
47:39:c4:96:6a:94:b5:bf:08:97:97:ce:05:b3:8c:4d:4e:7b:
e2:2d:a4:9c:a3:0a:1b:17:1b:17:9a:59:1f:64:a3:47:0b:6d:
bd:31:f8:7e:59:f0:2e:49:d6:30:7f:78:b8:ed:aa:9a:9a:91:
45:b1:27:8f:70:e7:f9:cc:69:42:08:b5:5a:39:2c:48:c2:79:
6a:16:33:bb:39:cf:14:70:a8:8f:80:a3:ac:b0:96:3e:d8:bd:
e3:18:e5:a0:d7:b9:12:e9:dc:ad:e2:fd:60:b4:d2:4c:39:10:
37:63:ea:a6:7f:b3:14:06:36:94:d7:af:d6:86:b7:9a:87:08:
d6:52:00:cf:27:c3:df:40:18:de:92:d2:57:78:ff:c4:3f:70:
ae:29:88:cf:01:6e:60:9b:08:6d:de:e3:b8:e0:2c:67:db:7e:
d7:f0:90:70:b7:91:a6:60:32:21:83:4c:83:90:c3:aa:de:19:
73:3e:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:25 2025 by rpki-client