Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa
File: 210d697f-4471-33fc-9f0b-14da84092c79.roa (raw, json)
Hash identifier: AeCC5qOTkGIHJktUGgLJzO/EqRxR+dPGMRq4dHfF68E=
Subject key identifier: C7:2E:76:CF:EB:22:2D:FA:7D:2B:1C:DD:1C:13:43:BC:4C:F8:33:C5
Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial: 010D0C9F432858489BA0B56867DE2763D76826E0
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 26658
IP address blocks: 198.180.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b5:68:67:de:27:63:d7:68:26:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=17d0f70d-cca6-451f-b149-40466e86acd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:90:70:e2:02:0d:50:02:7d:1b:91:4a:4b:9c:
74:f1:98:d5:a1:ac:5b:06:d8:37:94:93:ef:1a:f1:
6a:dc:5f:dc:10:31:9b:7d:f3:3d:26:59:62:e1:29:
1f:cb:6d:fe:eb:02:ef:ff:04:18:89:b1:f8:4a:4d:
59:3c:3a:eb:5c:72:9e:b7:1c:a5:4c:35:f9:ba:9b:
d4:cf:a8:22:22:f4:99:fe:f0:12:c1:2a:dd:c8:3d:
4a:29:c5:8d:fd:12:03:f2:e3:be:ef:f4:3c:d4:76:
82:17:11:ff:02:b9:ee:50:45:2a:ad:43:be:06:83:
5a:98:3e:b4:3a:25:47:0a:d4:b4:08:e8:b7:b6:94:
de:b2:7b:94:55:6d:38:69:ea:de:87:6c:c9:3c:aa:
ff:95:52:93:0e:14:c1:44:fc:03:0b:07:76:54:fd:
b7:59:a4:7f:30:92:e1:fa:e8:7d:fa:d1:f9:99:e1:
4e:02:45:a3:54:6c:77:a8:41:bc:5e:ab:b0:ce:0f:
46:91:1d:68:20:a3:44:06:74:51:87:0e:f1:bc:03:
6e:c2:29:1c:54:b6:41:62:a5:b4:39:e4:22:21:d9:
ff:58:f0:9b:f0:0e:e2:39:8e:af:fd:2b:84:db:97:
f4:88:f1:ed:5d:55:1d:93:55:e8:15:5f:1a:b4:c3:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:76:CF:EB:22:2D:FA:7D:2B:1C:DD:1C:13:43:BC:4C:F8:33:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
X509v3 Authority Key Identifier:
keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.180.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:7d:01:ca:76:2b:cc:0c:c5:28:1e:2a:fa:16:92:a6:70:4c:
3f:7a:a6:17:82:9d:55:d4:24:7b:fe:d6:66:d2:df:cf:88:c8:
3f:44:4e:ec:0e:42:6f:dc:c0:bd:32:66:af:1e:27:71:2d:de:
aa:27:d7:a5:1f:91:95:2b:69:6b:68:c8:85:0b:a5:f2:16:c7:
56:5a:d5:23:0c:2a:32:89:d6:97:dc:70:14:91:98:62:f9:f3:
a8:6c:e8:25:45:23:4c:99:fe:05:59:34:6e:94:bd:88:fe:4f:
5b:8b:ca:9f:5d:bf:6a:40:33:9c:70:e6:00:2e:15:9f:3b:26:
a4:6c:8a:bb:c2:37:a1:86:14:42:f9:4f:5c:f9:62:0f:00:4a:
84:aa:18:e8:ce:84:f0:cf:ae:5a:6f:7c:a9:7a:1b:bb:c1:96:
ca:33:96:b0:bc:79:07:b6:53:7f:25:b5:d1:8d:b0:2d:b0:e9:
a5:bc:a6:33:79:40:14:4a:38:60:c0:ed:0b:0d:50:e8:bf:1f:
2c:33:52:62:91:9a:fa:0c:a4:b8:7b:b0:f8:d7:02:4f:20:fd:
06:46:c5:84:57:25:be:2b:f2:4a:70:5a:a0:5b:3b:0c:ee:00:
e3:c8:bb:33:09:b1:bc:1e:72:9a:cb:75:ba:f6:f3:17:bc:3a:
11:02:79:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:11 2025 by rpki-client