Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1645e6e4-ee74-38eb-8728-ce4175262d98.roa
File: 1645e6e4-ee74-38eb-8728-ce4175262d98.roa (raw, json)
Hash identifier: BrPlGhNWSPALaYeLPBq7z3+NcDzr/i5+6VL4NQ9AB1o=
Subject key identifier: 4B:BD:76:5B:5E:5E:D6:01:47:23:65:1C:5F:91:FF:85:48:75:B7:1D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848D9C20D900E997F4F1E87EF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1645e6e4-ee74-38eb-8728-ce4175262d98.roa
Signing time: Tue 11 Feb 2025 20:08:18 +0000
ROA not before: Tue 11 Feb 2025 20:08:18 +0000
ROA not after: Mon 12 May 2025 19:08:18 +0000
asID: 3855
IP address blocks: 199.172.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:c2:0d:90:0e:99:7f:4f:1e:87:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 11 20:08:18 2025 GMT
Not After : May 12 19:08:18 2025 GMT
Subject: CN=c9273238-b2e6-408c-b96a-16705a9decdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ba:9e:b3:94:34:c3:1f:3e:1d:40:83:c4:6f:
5f:39:4e:48:82:bf:76:b8:07:a1:bb:a6:5d:9c:4c:
db:76:72:08:13:de:ab:d4:0a:b1:e2:64:6e:32:ea:
d6:aa:03:b1:19:1c:e8:31:a3:b1:ee:f6:c5:38:65:
35:e5:21:1f:f4:3e:da:e0:1f:b0:3c:e2:54:05:7b:
73:08:57:17:06:1a:72:01:cc:be:65:04:46:2a:71:
65:1d:9c:cb:c7:6d:b2:0a:c7:a9:57:0f:28:89:13:
88:00:9c:3b:fc:a7:dc:5d:be:c3:74:af:e1:c7:10:
d6:12:94:f7:20:7e:e1:70:50:df:96:43:de:67:5b:
f6:fc:fc:cf:31:ff:7c:43:e1:44:8a:bc:c9:e8:ff:
51:cb:54:ed:75:02:65:3f:8e:71:67:99:ba:a1:5c:
be:0a:53:9a:81:e2:fd:50:2f:1e:83:98:06:30:eb:
2c:0e:c4:60:3f:05:c8:fe:49:7b:21:69:fd:c6:cf:
e4:64:91:16:e4:35:64:17:a9:db:01:ae:5c:f1:6c:
ca:d0:d6:6e:35:e6:24:cd:ab:13:7f:95:5c:76:e0:
42:75:90:fe:36:9c:7a:a4:6d:23:18:18:9c:90:08:
d9:32:44:8d:f1:19:a4:98:28:f2:a3:1b:3b:e1:06:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BD:76:5B:5E:5E:D6:01:47:23:65:1C:5F:91:FF:85:48:75:B7:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1645e6e4-ee74-38eb-8728-ce4175262d98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.172.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:28:54:28:b2:68:b6:e9:f5:ab:cb:8d:05:fb:2d:ed:d3:de:
78:3c:8a:50:ac:22:23:ce:65:f4:79:ec:6a:82:02:08:04:5c:
71:d5:d8:70:e2:d5:ab:df:c7:34:80:04:b4:b4:e1:dc:c1:ed:
dd:1b:a5:5e:b3:66:0b:b8:26:7d:13:b9:80:ae:90:e1:be:93:
02:35:a0:b9:c8:9d:c0:4e:ef:3b:cb:4e:df:90:7e:94:79:c7:
d7:2e:1f:6c:eb:fe:f5:cc:90:65:8b:12:5e:2b:a2:20:69:7a:
6a:b3:fb:ed:b5:00:91:03:29:13:a5:c7:5c:9e:43:33:8f:f2:
0d:f6:2b:a8:5f:1e:9b:3b:37:16:53:41:bb:67:8e:ed:c0:8d:
16:53:e2:e8:9d:69:89:b0:e3:e8:4f:1e:45:19:d3:c4:2d:47:
4e:8f:d0:93:8c:b5:cc:62:42:f1:c6:0d:02:e1:db:06:ce:f6:
7b:50:25:ee:fa:b6:36:fc:87:16:9b:b1:09:9e:2b:49:bb:35:
99:c0:fe:bf:d2:74:50:1b:63:92:e3:95:fb:de:d7:b9:47:a9:
d3:c8:0f:2b:36:c2:54:b5:41:de:93:e7:4b:0d:5c:05:f1:3f:
a5:fb:c5:52:bd:9e:c6:c0:16:3e:8c:8a:fc:e3:c7:0a:f0:7b:
f8:1f:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:00:23 2025 by rpki-client