Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa
File: 33b25462-3f2f-33b4-ab16-bb27bccd452c.roa (raw, json)
Hash identifier: EePLKLKk+1+2tiMcHQpygM9WKMYJcn2RnvTZgDoshDI=
Subject key identifier: A2:54:95:7F:BB:42:08:8D:CC:74:6D:E2:73:FF:58:0B:F0:55:38:38
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F43285848C580F029C3797BFC532A9800
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 21949
IP address blocks: 198.22.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f0:29:c3:79:7b:fc:53:2a:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=8e039962-8e9e-4525-bcdd-a9e9db5e24b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:32:b9:62:38:3e:eb:57:54:d2:86:13:0a:
9b:e1:60:cc:51:24:db:0f:60:73:c2:79:cb:80:fd:
19:99:d4:22:02:49:4f:49:d9:d6:ab:fc:6a:42:53:
4e:c4:bd:13:41:cf:4c:7f:fa:26:bf:cd:1e:e4:e9:
3f:e7:26:dd:b7:12:39:31:b6:94:a7:a1:67:ca:9d:
aa:f0:12:6f:a6:66:f9:3c:42:40:c9:5e:f4:ee:d3:
47:b0:7a:bd:6e:6e:bf:62:1e:da:64:ae:86:12:04:
4c:20:ce:df:d9:5b:cd:5b:43:87:cb:48:90:6a:08:
02:8a:8b:ee:10:96:ee:2c:02:59:ee:d5:2e:c0:f5:
0d:91:bd:27:e5:47:6c:1a:ed:55:98:7c:29:24:0a:
49:c8:d1:e0:ee:e5:4d:27:94:08:b8:44:20:28:2b:
cf:0b:ec:e2:51:75:79:be:b2:62:fa:a2:40:3e:0d:
1f:2b:9b:e6:40:3e:4a:9b:b4:63:e1:24:35:20:fd:
a3:a4:2b:ed:95:7c:db:8e:07:49:e1:d3:c6:5a:7f:
ea:b1:15:82:2b:71:00:db:dd:ec:95:02:0d:ae:8a:
40:cd:97:e7:aa:88:7c:46:19:be:af:31:f6:fe:01:
48:36:fd:51:63:ac:2e:28:97:02:ef:33:aa:d0:b3:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:54:95:7F:BB:42:08:8D:CC:74:6D:E2:73:FF:58:0B:F0:55:38:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.22.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:b7:c5:9f:7b:cf:11:3e:2a:01:6a:dc:92:b6:02:a7:c2:80:
9e:56:e8:6c:22:3e:78:d2:8e:6b:eb:f9:66:44:ac:2c:bf:f1:
a6:a8:e1:e3:3b:56:be:04:97:9f:9e:9e:42:ba:d5:d3:8c:cc:
6a:cd:4e:f9:88:5d:55:03:70:e2:f5:a3:72:22:76:c7:ea:6e:
46:26:02:77:08:68:4a:80:e7:38:04:46:0b:49:ec:1d:e6:52:
f1:7c:2f:c3:67:99:0f:79:41:ac:18:f7:9e:fe:3c:0f:5d:e8:
3c:17:78:a6:8e:91:d9:7e:3d:6a:89:63:8a:ff:26:f9:8d:ad:
e1:6c:1a:8c:e5:a3:0b:88:d4:1d:a0:50:3c:a1:36:16:be:ef:
e5:85:bd:25:dc:20:a3:5d:00:a0:51:76:4d:fd:69:dc:a6:19:
a8:0d:03:45:8b:ee:a6:81:74:42:86:84:fe:2b:b6:14:d1:06:
59:08:7d:55:98:c3:38:8d:0c:c6:07:0e:e4:80:42:3d:38:5c:
a6:fb:68:6a:47:59:70:52:0e:4f:22:5d:10:0c:15:b6:8e:a7:
46:88:48:34:31:a1:fc:0b:3f:46:f0:97:10:9c:27:d8:da:39:
7d:0f:5b:e3:8a:07:70:18:21:de:b4:87:1b:9e:a5:15:a9:de:
d8:2e:34:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:39 2025 by rpki-client