Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd631421-2a10-3f63-8070-00e7c1116983.roa
File: dd631421-2a10-3f63-8070-00e7c1116983.roa (raw, json)
Hash identifier: abmuPSA7FnhSyKwZHhVHyReLs2KfoWe6FSJ4snpyTgM=
Subject key identifier: 94:2A:79:B6:2F:75:25:66:00:F7:C3:02:57:20:B5:66:2C:F1:38:B9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848D9C20E32AD1B43FB0E20C600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd631421-2a10-3f63-8070-00e7c1116983.roa
Signing time: Tue 11 Feb 2025 20:08:18 +0000
ROA not before: Tue 11 Feb 2025 20:08:18 +0000
ROA not after: Mon 12 May 2025 19:08:18 +0000
asID: 36549
IP address blocks: 199.172.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:c2:0e:32:ad:1b:43:fb:0e:20:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 11 20:08:18 2025 GMT
Not After : May 12 19:08:18 2025 GMT
Subject: CN=882dff02-9458-42d6-af0e-5d0c56d6f6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:50:80:58:25:29:58:ee:57:dc:b9:4e:89:
dc:c5:9e:34:38:d7:37:a9:49:ac:57:89:3a:f3:6a:
79:a1:e4:7d:04:57:d8:ff:b5:34:b4:8d:6a:d3:9f:
05:ce:c7:d2:b6:68:cb:23:ed:e1:34:47:ea:77:0f:
f9:13:35:78:3f:65:20:66:7d:4e:f7:18:0f:de:f0:
48:cb:4e:dc:d7:3f:ac:e3:7a:7e:54:fe:3b:93:dd:
d3:54:dd:bb:b6:6f:6e:6f:bc:55:37:2e:e8:d8:09:
e9:00:1a:d1:f8:95:6c:d4:69:03:5f:42:3a:70:53:
ee:0b:3a:b7:15:e1:3e:f5:b4:72:75:a1:ab:e4:07:
02:3c:f1:d6:50:1c:3d:64:5f:9f:64:d9:ea:af:de:
f3:0d:fc:39:c9:fd:76:61:9c:40:46:6c:04:2e:f6:
dd:fb:30:9e:46:d9:5c:94:99:12:4a:a5:eb:cf:22:
11:7b:4f:13:17:20:02:94:a8:08:e5:00:e3:66:7d:
0b:36:a5:39:8b:22:dd:17:fb:01:83:e8:06:b9:3f:
7b:c3:74:04:83:3e:77:91:62:24:99:1a:10:e4:38:
4b:88:2c:3e:66:49:1f:4d:30:2f:10:47:0f:b8:cc:
b2:52:c2:df:03:19:53:f0:21:cb:1a:b5:fd:1c:6c:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2A:79:B6:2F:75:25:66:00:F7:C3:02:57:20:B5:66:2C:F1:38:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd631421-2a10-3f63-8070-00e7c1116983.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.172.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:3a:75:1e:8b:32:c4:fb:4c:c8:aa:e9:93:ac:7a:22:42:e8:
c0:ff:ff:35:ce:3f:e9:ab:e6:7c:85:16:c9:df:f9:49:f2:7c:
61:dc:74:2b:34:b9:1b:ed:8f:2b:d4:c3:09:1e:1c:46:10:00:
42:7f:64:7e:08:8f:04:d9:4d:af:0b:a9:99:48:d9:ce:ee:c1:
b9:5d:8d:2a:60:53:e5:b8:e9:2a:c7:0d:99:a0:83:aa:f6:a6:
21:16:04:c3:25:2b:92:74:cc:7f:bb:22:3c:4e:ef:a3:dd:b3:
b4:72:56:86:32:ea:75:a9:8c:d6:3b:bd:ea:b3:7b:b3:ae:07:
ff:84:c5:09:40:7b:b8:08:da:11:f1:57:00:3e:c9:dc:23:ec:
21:8d:6f:35:fc:f5:44:c0:c3:f2:aa:65:fa:46:45:55:6e:dd:
26:f3:5d:16:db:62:8a:43:36:58:d4:fa:22:55:25:22:7c:b5:
41:13:74:36:97:80:64:97:c9:96:a2:63:4f:dd:33:82:14:ce:
3e:2a:c3:82:93:97:c0:62:68:ba:29:09:a3:88:7e:66:34:1e:
96:b0:b1:ce:8a:2f:63:c3:15:b4:85:fb:b4:e0:02:c9:a0:c6:
3f:92:ee:4a:e7:fa:30:54:d7:86:e9:a0:b9:db:4c:3a:a5:83:
3a:31:8d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:44:01 2025 by rpki-client