Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fb7e023-12e0-3bb4-975d-f5c467eccdb8.roa
File: 0fb7e023-12e0-3bb4-975d-f5c467eccdb8.roa (raw, json)
Hash identifier: fDUx0oSrdIbTV5kT803f99CYAT4ma/K8sQ8FEsuuuLo=
Subject key identifier: FD:0D:4C:C3:6A:56:72:3E:D3:DC:BA:8D:C1:D4:07:C1:A4:A8:09:F4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493ED3E49C8D0E4FBBF7C47000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fb7e023-12e0-3bb4-975d-f5c467eccdb8.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 26008
IP address blocks: 199.101.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:e4:9c:8d:0e:4f:bb:f7:c4:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=d13f3165-0f80-4be1-aad5-ce2e09c7dea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:fc:bb:ba:d0:d3:98:c0:ae:c2:b7:92:a2:
81:54:09:04:bc:0c:b1:54:9d:27:35:97:7e:d0:a0:
ec:3b:54:ae:17:59:41:de:f6:7a:c5:64:88:d4:2b:
9f:d6:6f:93:18:71:f5:5b:63:1a:2a:e6:cb:bc:53:
62:d5:f6:ee:46:de:65:ba:36:74:69:06:d1:f8:63:
17:6e:cb:9d:31:3d:4b:09:ae:57:6d:75:3b:5b:ba:
01:ec:e2:bd:04:8c:99:18:f9:5a:a2:4b:c7:b1:70:
6a:9b:d4:8c:06:35:8a:5b:f0:49:81:7d:81:75:93:
2e:58:42:d6:2a:1f:c1:55:6e:3f:4b:4a:a3:ed:4d:
37:d1:35:5e:55:48:ee:c3:ae:66:45:45:ff:35:e3:
d0:86:ed:fd:0d:8e:de:e7:49:4f:00:d9:11:54:70:
b6:c4:a0:ec:2a:4f:44:0e:c3:d2:a8:34:14:a4:28:
fe:cb:f5:8c:db:de:d6:7c:fe:83:83:0c:da:59:6d:
e7:7a:43:72:2d:f1:91:02:11:c0:75:f8:b1:23:f0:
26:a7:82:30:1f:95:b0:d3:66:74:d1:5f:0c:7a:f5:
50:df:c9:48:56:a9:dc:fe:9d:b3:c7:59:62:15:e0:
da:85:0e:a6:80:16:59:4c:bf:6b:d3:8d:6b:3d:08:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0D:4C:C3:6A:56:72:3E:D3:DC:BA:8D:C1:D4:07:C1:A4:A8:09:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fb7e023-12e0-3bb4-975d-f5c467eccdb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:f9:71:50:3a:b7:61:a0:49:4e:68:e3:97:ea:ae:ae:37:a4:
e5:64:95:9c:0a:a7:e1:8a:ec:e3:2b:11:a4:7c:20:5a:be:57:
7b:17:dd:ae:f7:2f:f7:ef:f8:9a:5d:65:1a:44:de:c2:ea:cd:
17:7a:e0:59:9d:e8:c2:b5:af:9d:ba:0b:c5:b1:11:88:09:fe:
4a:a0:2c:02:93:d7:4d:1a:cb:13:7e:df:cb:2b:d8:bc:a1:b8:
36:87:a4:8b:97:1c:e9:08:75:6a:72:ed:3f:10:3b:bd:5c:83:
c4:17:39:35:79:c0:5e:23:33:58:c3:7c:31:80:b0:14:ae:f7:
fe:dc:50:6e:6b:29:b5:f0:01:47:a8:ee:db:c2:1d:77:d1:ae:
55:c4:94:45:11:24:ee:a5:ec:d7:8b:3d:8b:ea:a7:14:49:d0:
f1:0e:c2:27:c2:03:5c:6c:67:16:6a:ce:c2:0d:27:b1:7e:3d:
4d:b6:4c:0e:26:cc:9a:bc:59:69:5c:9f:84:23:57:21:1c:45:
a9:eb:eb:75:7f:59:32:cc:bc:60:6b:78:c2:88:a7:b9:e0:45:
4b:69:a1:72:17:6c:f9:04:aa:ed:a7:ef:48:f5:2f:e0:09:5d:
e0:24:4f:89:e1:29:74:2b:4d:c3:fe:b5:72:eb:12:33:b7:78:
b3:e6:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:45 2025 by rpki-client