Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa
File: 23d95a46-a535-30ef-8cc4-386ad17abeb9.roa (raw, json)
Hash identifier: v01/cXxd2XrjS8ewXwBDUc71q55WzgyUgSrmOLezElg=
Subject key identifier: BE:C5:76:DA:54:07:4E:27:F8:5C:8A:19:0D:F6:B0:4F:C8:4B:23:E3
Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial: 010D0C9F43285849248E82357B801461845DB800
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa
Signing time: Mon 10 Mar 2025 15:10:04 +0000
ROA not before: Mon 10 Mar 2025 15:10:04 +0000
ROA not after: Sun 08 Jun 2025 15:10:04 +0000
asID: 21782
IP address blocks: 199.45.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:8e:82:35:7b:80:14:61:84:5d:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Validity
Not Before: Mar 10 15:10:04 2025 GMT
Not After : Jun 8 15:10:04 2025 GMT
Subject: CN=376de723-d676-4160-a23e-e8fa34b74b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:96:66:7f:d1:be:83:b7:e3:f2:c8:f2:34:
6a:7a:32:b9:7a:c3:9a:71:b9:7a:1b:52:0f:16:f2:
c9:dc:49:ab:f4:9a:71:d0:8e:a5:87:60:9c:e7:80:
52:19:7e:4e:c7:e3:80:bc:13:2f:4b:ed:81:09:a5:
b8:db:aa:84:6e:fd:d2:c1:77:c9:ad:f6:ab:cf:b0:
f4:45:e6:32:a0:65:54:e6:2f:7f:9c:72:30:3a:da:
0c:0b:b0:7f:eb:04:4e:49:2f:95:56:f2:51:49:27:
d2:6f:18:39:84:05:b6:71:f8:4d:cb:82:dd:22:85:
70:96:04:74:5a:df:c8:2c:7d:77:1d:b5:2c:8b:31:
8a:ba:b7:dc:65:fd:25:f1:21:be:2c:7d:90:40:97:
53:2c:f8:86:24:0e:63:17:ec:dc:90:59:98:8b:33:
ff:79:a8:a8:c4:5d:3e:7a:53:e3:7c:4d:eb:d8:22:
1b:92:70:05:6f:2f:a9:3d:ea:59:2a:88:d6:a0:a2:
9c:f4:b9:4c:67:ab:45:e2:10:8e:95:a1:4f:cc:08:
05:74:6c:ed:d7:a9:ec:8b:23:3d:e4:d8:9a:ef:fe:
90:c3:04:f7:f2:bf:7c:e3:c2:0b:94:58:01:5a:11:
c0:0f:56:3b:46:cd:77:ef:27:0d:c4:59:59:ba:29:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:76:DA:54:07:4E:27:F8:5C:8A:19:0D:F6:B0:4F:C8:4B:23:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
X509v3 Authority Key Identifier:
keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.45.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:b4:38:58:41:be:e6:3b:89:7a:67:cc:f9:aa:ee:77:38:c9:
19:8c:58:da:31:cc:11:2e:9d:03:65:95:2d:2d:9e:67:b7:d7:
46:0f:f0:88:78:8c:da:2e:fb:cd:ff:af:89:32:d0:a6:ce:49:
70:2e:8a:c5:cc:04:52:d0:b7:d3:8a:24:73:2c:75:86:b1:11:
d6:57:58:9f:0d:fa:29:b6:46:e3:36:2f:f1:15:46:af:b9:9e:
d3:5e:15:ad:87:6a:80:12:9c:c8:32:4b:46:ce:43:fe:f1:50:
8a:1f:69:f9:fd:e2:62:da:60:a3:bb:bf:22:60:01:45:38:10:
02:98:58:b3:61:74:06:2f:58:39:df:5b:be:ba:3e:bb:a2:e4:
9a:45:11:72:ba:9e:f9:0a:18:e8:b3:ac:26:76:dc:71:34:31:
91:d0:7b:2b:a9:f2:cf:54:39:82:ab:6c:88:76:7d:0e:61:1c:
e8:1c:b7:c6:a7:5c:29:97:9b:f3:4e:4c:f2:6e:5e:0d:62:91:
9b:b9:1f:a0:8e:b6:e1:d7:81:37:c1:5b:0e:56:0f:25:00:36:
a8:5b:97:22:f2:8e:c4:04:bb:fb:69:f5:bb:f1:99:14:55:62:
e1:ed:cd:94:e2:5c:c6:1d:19:92:db:40:54:7a:e1:35:b1:5f:
c0:a5:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:19 2025 by rpki-client