Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa
File: a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa (raw, json)
Hash identifier: BnPXcJRVfL+DDrR2lBSxtOCVkUj0W5lWHJSkfD+CnRE=
Subject key identifier: 6A:54:B2:E8:60:0B:93:53:E2:8C:78:1E:23:C6:35:AB:F2:8A:00:2E
Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792
Certificate serial: 010D0C9F432858494733E98F95856A92A76DAC00
Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 204631
IP address blocks: 199.47.148.0/24 maxlen: 24
199.47.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:e9:8f:95:85:6a:92:a7:6d:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=5e52968a-fd27-4ae7-8bac-af36984814dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:f8:ab:49:f3:3b:f8:e4:62:d9:4f:15:ac:
1e:30:0e:7b:3e:b8:41:12:58:c9:f7:5d:38:9e:0e:
cd:58:18:5d:81:d4:43:25:31:c4:ea:a3:fe:91:5e:
2d:c7:fe:2d:15:0a:d4:0a:a5:9e:5a:71:32:7b:c1:
fe:49:f5:c7:d5:83:86:36:d5:16:c1:68:ab:50:82:
5c:10:0e:48:9f:29:80:cd:14:d8:07:e1:4e:4c:18:
3c:6b:7c:71:5c:fc:bc:4a:9b:fd:76:9c:3d:1f:94:
bb:fb:9c:76:c7:90:e9:ca:56:9b:1b:84:01:b5:7c:
48:65:82:e0:92:d6:12:69:86:77:bb:0c:09:5b:4e:
90:12:be:34:c9:a7:84:f0:32:ce:d2:80:08:ab:98:
2d:a3:eb:fc:ef:35:ca:db:3e:3f:fa:a9:36:19:cd:
70:6d:f2:12:1b:b4:0c:ff:13:e4:4d:a3:34:aa:11:
35:b9:d6:1a:8c:61:1d:0c:81:bb:b5:ed:37:3c:4b:
f5:16:33:60:9b:e5:6b:df:c6:71:f5:77:4a:f1:98:
f9:f6:bd:4f:55:1c:77:62:8a:50:93:b4:46:af:d3:
6d:63:28:cc:09:71:b4:0e:1d:b8:2f:dd:b0:e2:06:
f8:e8:94:8d:b4:90:42:8c:1f:28:e0:70:6c:e0:9b:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:B2:E8:60:0B:93:53:E2:8C:78:1E:23:C6:35:AB:F2:8A:00:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl
X509v3 Authority Key Identifier:
keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:2d:e8:d5:43:68:f1:4e:b5:29:86:04:8e:3b:eb:4b:77:fd:
d2:8c:55:b9:eb:99:22:49:e4:44:f2:2e:b3:cd:f8:85:0c:a4:
20:ef:b7:00:14:6b:54:da:5e:3f:4a:36:0a:c1:72:a5:ac:72:
6c:41:6f:78:60:09:f6:b7:76:ac:bd:5c:2f:0b:1b:4c:f9:6d:
05:e9:0c:5f:9f:96:3e:5e:0b:a5:a8:e0:aa:4d:34:09:59:41:
01:8c:01:b9:b7:52:a5:a3:83:b9:ef:24:bb:e2:d3:15:fe:0d:
4f:0e:20:a0:2c:cf:a2:71:90:e9:27:9a:ce:ad:24:3b:e5:ab:
23:f1:5e:af:c5:ba:21:03:12:9c:49:e7:0e:fe:9a:a5:52:6f:
5f:ff:87:01:97:7b:50:89:39:91:bd:04:5c:8a:97:82:48:27:
f9:fb:ec:ce:2b:1e:02:f0:93:ec:81:37:21:c9:67:dc:d6:7a:
81:07:f4:d8:00:2b:e9:09:50:7a:56:7a:bf:d8:6a:0d:c0:49:
4c:d7:6b:fe:64:b7:ba:80:01:05:19:0b:07:9e:5e:a1:1e:6b:
0e:f3:ee:39:84:5d:29:e8:df:40:55:3e:5a:32:23:64:23:0b:
07:6b:8d:97:76:f5:1c:25:74:e3:bc:a1:0f:da:b5:5e:50:b1:
29:4a:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:12 2025 by rpki-client