Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa
File: aaf41670-9101-34ad-ac92-f5d05de80639.roa (raw, json)
Hash identifier: Hp5P3mCHo6XlDJ5XQffSpiAVgFivg4R/2wVmCCJkRp0=
Subject key identifier: C4:EE:66:0E:34:13:8D:49:8A:C8:AC:37:71:5D:1C:87:E8:FC:EA:5F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848FD56CCFFE300E296A4DF1180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 0
IP address blocks: 199.222.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:cc:ff:e3:00:e2:96:a4:df:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=fd3e426f-e9f1-491d-afc1-08f5da5299a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c3:b6:dc:76:86:db:22:c0:46:a7:67:54:0d:
ca:73:88:fe:6c:7a:77:6e:f4:91:50:3b:81:9e:51:
d3:ec:d8:7a:a5:53:ee:c3:3e:17:4a:04:7b:6e:e5:
bf:51:17:77:aa:a6:7c:53:07:96:d1:1e:95:33:9c:
e3:1c:cd:01:f9:b9:0b:98:a7:72:92:ee:53:9b:c4:
d3:d7:77:f1:77:7b:d5:25:d7:cf:b2:b4:e2:f1:a1:
9d:c2:d9:7c:ac:ec:a8:11:15:da:18:43:32:cf:63:
07:3b:96:03:9f:97:6c:9e:5b:37:99:8f:9c:79:ae:
52:08:9c:1b:dc:ab:9b:08:a6:e2:35:fa:9e:b8:5e:
ea:21:be:16:b8:a5:f7:cd:56:06:03:e6:d9:7f:4f:
bd:a9:f1:43:c1:fe:9b:78:1a:a6:e9:ac:d9:76:55:
1e:ea:93:3f:8c:7f:8e:6e:a4:3e:1f:fd:5f:08:0f:
22:9b:fe:99:0e:8c:c5:6c:ee:d7:6a:cb:c4:ff:db:
76:ea:53:a6:b6:99:6e:b3:59:4a:25:f9:4c:3d:11:
a7:5b:3c:36:9e:cb:52:98:5c:37:aa:d3:ea:18:1c:
35:36:4b:6f:86:ef:78:d2:1e:8e:2f:2f:52:08:66:
6a:2f:d9:0f:96:47:4f:e4:3e:36:77:6f:5a:69:7c:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:66:0E:34:13:8D:49:8A:C8:AC:37:71:5D:1C:87:E8:FC:EA:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.222.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:92:b1:84:b6:e8:8c:fc:d5:c2:c4:d3:fe:a5:97:5b:02:54:
9b:cb:3e:68:e2:43:56:ba:ba:97:f7:9f:d0:2e:a7:60:ad:2f:
ce:a4:f5:ad:b0:60:16:84:0a:af:44:25:fc:33:18:63:d0:cb:
2e:dc:f8:93:12:9b:a2:a4:db:09:1a:df:68:60:1a:b0:65:8d:
39:9a:1c:9f:be:ad:31:b6:99:bf:da:28:cc:e0:65:67:1a:81:
54:9e:42:84:46:81:ff:21:cb:67:79:68:79:92:41:45:a1:17:
88:53:e8:75:57:fe:6a:13:35:55:d3:ba:22:73:a9:75:31:92:
0c:ff:76:43:6f:b7:99:a8:eb:a4:c8:e7:6c:7b:be:8d:b6:7c:
10:24:d0:0c:db:0e:e6:ed:0d:64:c4:4d:5a:a7:ac:55:0b:4e:
e4:50:a5:23:3f:b0:0f:f5:cd:fc:ac:67:ff:1a:dd:c0:0b:8d:
b7:ed:ca:39:db:5a:2b:d3:88:6e:bc:20:4b:8b:97:d0:63:23:
2a:0b:44:23:5d:0f:f2:79:d9:1c:99:34:8d:e3:11:59:fc:a0:
ec:7e:a3:a5:19:f9:5f:bf:ef:81:2a:82:4a:ce:f2:f1:f2:67:
54:5f:95:db:bd:da:91:36:3a:3a:65:5b:af:9d:bd:b2:b1:22:
e6:46:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:39 2025 by rpki-client