Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/1142bffd-0379-388f-ac81-778e265c4b3f.roa
File: 1142bffd-0379-388f-ac81-778e265c4b3f.roa (raw, json)
Hash identifier: Xu5tDA6+xXQv+NHzoMkFg0xEmu55a9IvAI1E7bzsOqU=
Subject key identifier: A1:60:F9:49:07:90:37:A9:4E:A7:51:6E:61:1D:56:35:D6:0B:B3:9D
Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial: 010D0C9F43285848C6E62960E8A459B1D05179E0
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/1142bffd-0379-388f-ac81-778e265c4b3f.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 398395
IP address blocks: 199.253.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:29:60:e8:a4:59:b1:d0:51:79:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=01709a39-b865-4d59-9392-e487721cf83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:8b:2a:df:de:b6:5a:bd:9c:ee:69:ca:ae:
3f:9d:c1:fb:4f:fc:5a:2e:9c:4e:fb:12:ec:5a:74:
25:cc:83:48:3f:45:41:98:f5:6e:02:5b:6d:ef:68:
30:cc:73:62:f1:93:ae:01:fa:37:7a:f2:15:b3:08:
8a:9b:fd:08:d2:f5:c5:f1:a1:ed:b3:78:a1:74:71:
b7:ae:68:d1:45:c0:4a:a2:25:e7:19:73:62:1b:5c:
86:c9:c9:ed:d7:87:66:81:6d:a1:7d:f7:3e:57:44:
e4:19:8b:94:4a:f4:b4:69:fb:d6:28:ad:55:29:ad:
62:7a:f5:cb:41:65:c6:d4:bd:98:96:18:73:5e:d7:
00:3f:21:3e:b3:70:e2:c0:89:a7:5c:ab:2a:a3:db:
82:64:1e:ad:1d:5f:d3:83:24:af:6d:f0:8e:92:0c:
52:6f:59:97:b9:df:ac:a1:02:73:ee:0a:7e:28:70:
39:c8:12:74:0f:6e:3e:a8:d9:13:81:8f:51:cb:dc:
18:17:f0:0f:83:61:96:e0:77:ee:0e:69:69:45:82:
60:cd:96:e2:67:bf:00:58:a7:00:ec:33:6e:cc:96:
bc:72:55:86:1d:38:38:c6:c1:46:2f:b7:dd:28:5a:
c8:8f:3b:48:0e:ab:15:05:18:46:99:88:c3:b9:0a:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:60:F9:49:07:90:37:A9:4E:A7:51:6E:61:1D:56:35:D6:0B:B3:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/1142bffd-0379-388f-ac81-778e265c4b3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
X509v3 Authority Key Identifier:
keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
sbgp-ipAddrBlock: critical
IPv4:
199.253.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e5:dc:f1:9f:00:3e:50:aa:58:4d:39:fa:e4:dc:d9:ef:af:cd:
6e:aa:c9:37:75:e1:0a:49:7c:d0:70:d4:8f:d4:91:ea:bd:66:
be:8a:6c:68:3b:8a:9e:cb:fa:55:f5:e3:a1:4d:94:fb:34:43:
9b:13:30:f5:a4:12:61:f5:4f:ab:48:44:2f:6f:54:2a:e3:ff:
65:75:2e:61:b2:62:0d:11:f0:0b:f6:78:27:55:b8:61:49:38:
95:13:ba:21:e8:18:bb:67:bb:2b:c8:de:90:2f:48:69:20:22:
ca:88:d7:85:6c:57:76:13:14:c8:28:b5:c9:b5:88:25:6e:0f:
74:ed:bd:f9:91:75:5b:3d:51:44:45:a7:a9:30:47:1b:27:17:
a3:cc:01:2a:16:a1:40:11:12:83:ec:ba:fb:88:7a:1f:3b:8c:
48:7a:1b:22:4d:82:c0:c5:6f:c7:fc:b0:f5:48:1b:ab:d9:4e:
0c:d6:1b:c3:b8:86:20:31:ba:17:2d:ed:a4:75:ef:ba:52:ae:
b7:03:cc:0e:18:32:ff:16:7f:2e:0c:68:0a:83:14:a4:93:51:
b5:23:ca:7f:2a:ff:5d:e3:c2:b8:6d:7e:06:b6:3b:8a:32:03:
55:03:36:77:dc:fe:25:da:9b:e9:18:1f:7f:dc:33:7b:52:2f:
78:cb:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:35:00 2025 by rpki-client