Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/532cda7f-ca68-30cf-8989-67baaeec7864.roa
File: 532cda7f-ca68-30cf-8989-67baaeec7864.roa (raw, json)
Hash identifier: Q2YgC1GOoJ77bsEUrmrLMn9CRcPiJERCBeGJE5u173k=
Subject key identifier: 1D:F7:DA:31:85:EF:69:C0:4F:2A:4B:2D:2F:63:4C:14:37:CD:96:86
Certificate issuer: /CN=727f5e3c-17f5-4284-ae37-06cc8cada272
Certificate serial: 010D0C9F43285848FA8BEA4CFCF024F8F12B3A80
Authority key identifier: 6F:30:E6:02:4E:29:19:DC:BE:E0:FD:E7:24:9B:67:22:7B:80:A5:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/532cda7f-ca68-30cf-8989-67baaeec7864.roa
Signing time: Sun 23 Feb 2025 14:00:51 +0000
ROA not before: Sun 23 Feb 2025 14:00:51 +0000
ROA not after: Sat 24 May 2025 13:00:51 +0000
asID: 7018
IP address blocks: 199.58.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fa:8b:ea:4c:fc:f0:24:f8:f1:2b:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727f5e3c-17f5-4284-ae37-06cc8cada272
Validity
Not Before: Feb 23 14:00:51 2025 GMT
Not After : May 24 13:00:51 2025 GMT
Subject: CN=81f0e620-f826-4e3f-b1b6-08254062230b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:4d:f6:fa:0f:3b:9d:4c:a4:fb:ef:f9:0a:
b9:fa:78:15:3b:81:2c:08:15:f5:89:3e:18:98:86:
8b:e9:1f:3f:6e:4d:03:56:da:ad:b3:77:c8:05:4d:
87:f0:b8:11:c7:d6:61:cc:bb:7e:1e:fd:2b:f2:6d:
d8:15:7d:26:e4:e1:a7:66:9b:07:6a:09:3b:c6:52:
37:14:1a:01:c0:53:db:ba:1e:04:a9:7d:8f:dc:d9:
73:a2:cd:5f:d4:24:ba:4a:bd:66:30:41:c6:b5:d8:
50:78:72:02:bb:21:79:da:d8:c0:58:9a:be:54:ce:
52:96:56:ee:1f:08:29:d4:c9:da:88:60:f3:ff:fa:
08:ae:43:85:fe:c2:c8:f4:e9:85:da:3d:5e:d3:51:
44:78:df:13:74:b2:00:e0:60:00:3c:e3:1c:93:bb:
23:05:ea:de:04:2e:61:17:00:4d:e4:1d:e3:a0:f6:
18:2f:25:5e:e2:1e:d8:61:ce:3f:a4:94:a9:7f:20:
87:c6:4d:ed:fc:4f:3b:77:5e:12:c0:e8:25:9b:00:
81:f0:c4:6c:15:10:63:85:cb:ad:2b:5e:d3:20:78:
a8:ec:ab:7b:6a:e5:8c:f5:d5:e1:98:84:1f:69:11:
4e:ad:45:ec:c8:91:e9:5f:18:61:72:d0:9d:c9:18:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F7:DA:31:85:EF:69:C0:4F:2A:4B:2D:2F:63:4C:14:37:CD:96:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/532cda7f-ca68-30cf-8989-67baaeec7864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.crl
X509v3 Authority Key Identifier:
keyid:6F:30:E6:02:4E:29:19:DC:BE:E0:FD:E7:24:9B:67:22:7B:80:A5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:18:3f:d9:f4:81:06:9d:d4:aa:ba:9a:9a:02:08:23:fc:15:
e5:a7:28:b1:44:35:18:42:18:d7:9b:85:67:49:45:0e:f6:d2:
73:7b:cd:21:7b:89:13:f4:2b:1c:84:3f:73:30:a6:10:ce:58:
fc:7b:06:6e:bf:66:3b:d0:bf:c3:6c:56:24:bf:f6:31:88:04:
30:7d:b2:12:da:be:13:1f:36:4a:04:97:f0:fe:06:40:64:d3:
4b:49:f9:b8:99:dd:b3:99:9d:7a:88:e8:ab:ad:f7:0e:f9:d1:
4e:fa:85:3d:31:99:50:80:aa:8b:f4:e2:f9:12:80:f3:53:93:
1f:7c:18:65:e7:14:17:67:71:07:dd:93:49:0f:51:26:ea:f5:
cf:50:6b:00:c6:75:00:95:c4:ee:53:02:e5:6e:78:44:8b:3a:
d7:c8:e7:0c:53:31:a9:ef:e8:04:55:0c:17:f2:af:77:97:57:
54:eb:46:b0:58:6f:34:76:f9:75:69:4d:98:03:b2:ab:7c:5e:
ad:bf:b8:1c:3b:15:a0:cd:e4:15:50:47:ff:e4:26:b0:61:14:
22:2c:be:91:5e:74:54:f2:5d:1e:70:92:88:c9:bc:7c:8f:5a:
b3:c5:6a:9b:8c:2b:15:cb:10:8a:48:bc:2a:ea:1b:fc:c0:75:
c2:d1:7d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:02 2025 by rpki-client