Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9404fcc7-0183-3a30-877b-74dd02d9117f.roa
File: 9404fcc7-0183-3a30-877b-74dd02d9117f.roa (raw, json)
Hash identifier: bru8lV+XWuhXszD/3EfwVblt+5JY728VigTqaK9tei4=
Subject key identifier: CC:7E:7E:55:7B:D2:C1:C3:E2:7F:2A:EA:0B:B4:7A:99:BA:72:27:FA
Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
Certificate serial: 010D0C9F43285848A136097E64626848D55FAA80
Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9404fcc7-0183-3a30-877b-74dd02d9117f.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 62597
IP address blocks: 198.51.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:09:7e:64:62:68:48:d5:5f:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=4b8316a4-7221-4ea9-ad54-7f5e0fe21a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:fb:77:24:9a:ac:af:f5:e4:61:99:11:43:
da:ad:2a:75:42:98:62:f6:23:e3:ef:b0:7d:13:2f:
dc:05:94:6e:3a:96:e2:c7:30:d5:09:ae:c5:d3:44:
b2:f0:ec:4b:b6:b3:32:a6:4f:e2:ae:ca:88:1f:ec:
e9:76:12:50:ea:08:e7:34:51:7f:c8:e9:a2:ed:60:
d0:42:9a:29:8e:bd:ed:b6:9e:42:6a:f9:57:39:34:
77:69:08:c9:48:91:72:36:27:18:cf:9a:b7:a6:b8:
cf:22:62:39:51:74:a3:96:34:81:50:f4:46:5e:b7:
d7:38:08:0e:9a:b4:25:a0:7b:2d:bc:f7:7f:78:ad:
c8:31:a3:5d:34:c0:36:58:d3:f2:53:8f:fb:45:85:
d7:20:00:e4:d3:ae:2b:02:f0:4f:83:c8:6d:c1:35:
a4:62:71:96:c6:f5:4e:bf:55:ed:ce:2c:5a:e8:41:
9c:a7:92:a0:64:0f:57:62:3d:88:44:c1:38:25:f6:
e0:dc:3b:6e:84:84:48:20:75:4e:14:84:7e:2d:91:
1f:5e:0d:59:16:28:d7:4f:90:25:69:02:8e:05:0c:
f8:d4:ee:7a:06:d6:cb:f9:6e:0a:c6:c3:f3:5b:9b:
c3:8a:3e:49:f0:62:bf:85:92:67:0a:b6:42:da:18:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7E:7E:55:7B:D2:C1:C3:E2:7F:2A:EA:0B:B4:7A:99:BA:72:27:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9404fcc7-0183-3a30-877b-74dd02d9117f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl
X509v3 Authority Key Identifier:
keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
sbgp-ipAddrBlock: critical
IPv4:
198.51.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:33:d5:0d:b3:c3:06:1d:74:dc:c3:1b:f7:62:d1:f1:ee:66:
a0:66:bb:79:64:c0:22:d1:94:4d:e3:c8:28:ff:43:f6:9b:7c:
7e:2c:25:9b:56:31:a4:0e:46:f4:bb:54:81:9f:cf:6b:95:b4:
98:73:b1:8a:16:22:b0:08:4f:0b:7a:22:23:a6:67:8f:49:7d:
c3:60:d0:b4:a9:f6:e4:4d:32:2f:fb:7e:3b:65:b0:2a:c9:9f:
f1:ee:dc:5f:67:8b:1f:c5:97:be:ce:57:7f:44:84:d1:31:ad:
09:6d:ae:5a:86:0a:c4:04:90:13:57:07:a1:75:50:d4:f0:1d:
6a:c1:59:4e:11:c6:14:9b:bc:a8:04:58:c0:e2:71:6c:2a:d4:
8e:b0:33:ac:10:8b:77:17:3f:6c:16:65:79:e6:8e:44:06:31:
3a:08:ec:d7:87:b8:14:83:b0:d8:30:41:d9:ac:f6:72:32:27:
9f:a2:f7:d6:1a:7a:57:1d:95:77:08:81:26:ca:ef:65:a7:a7:
0e:c6:ba:e7:f4:24:ef:b7:7c:b8:23:4d:76:c1:67:bb:ea:69:
0a:0d:fe:79:0f:5d:e6:cf:1d:34:3a:bb:e6:ce:6e:d3:f3:98:
60:1b:3a:fc:c2:95:69:4d:70:01:02:6f:65:69:5d:44:13:51:
08:43:d9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:41:48 2025 by rpki-client