Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/05532e03-b3a1-3527-bf6a-64d41fa06e14.roa
File: 05532e03-b3a1-3527-bf6a-64d41fa06e14.roa (raw, json)
Hash identifier: ZXGl+RbZo8y+uEDQ5remOuLtcyUdP/S/WGFkx4LfYfU=
Subject key identifier: 2B:17:E7:FC:F5:0F:7B:96:B9:AC:86:93:58:3A:CF:A0:A9:C0:E1:78
Certificate issuer: /CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
Certificate serial: 010D0C9F43285849071BE958B44887557C6F3DC0
Authority key identifier: 1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/05532e03-b3a1-3527-bf6a-64d41fa06e14.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 198.202.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:e9:58:b4:48:87:55:7c:6f:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=43d17bb3-b864-41c5-84c3-e9bf0938e3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:77:dc:0c:3f:86:04:ec:97:f3:b2:74:87:
da:0c:03:c7:b7:23:5b:9f:87:8d:e7:41:a0:89:73:
c4:65:5c:ed:68:4d:d9:b5:73:3c:a1:cc:2f:1c:a0:
d3:2b:f7:34:6e:a2:5a:34:16:54:8d:95:83:ea:01:
19:06:04:72:8b:68:74:93:cd:c3:9d:5e:29:32:7c:
e3:5d:44:9b:db:60:72:6f:95:1f:08:1f:92:20:61:
0a:75:d5:5c:0b:13:fe:d3:2a:35:89:df:cd:51:bb:
cc:3f:68:c7:26:30:82:83:12:cf:05:b5:42:e8:d8:
81:a8:04:0f:92:56:13:83:b9:bd:63:39:a3:2b:94:
29:46:18:2d:fb:b9:ef:f9:cd:65:da:d6:c4:1c:e6:
50:cc:10:b3:99:e2:93:ea:11:db:a3:e0:51:93:4c:
3c:e0:fc:64:aa:6a:ae:c2:ff:aa:86:41:f3:cc:44:
5e:8f:fe:23:f3:64:d0:59:2f:54:00:8a:68:a6:d4:
8f:e3:bf:2e:34:5c:6a:8c:74:f0:4d:cb:58:b7:d6:
e7:6e:73:73:d0:32:26:d2:d8:64:32:9e:df:ca:db:
c4:ec:6e:a1:ab:74:69:4a:1a:b6:c3:56:0e:28:4d:
71:83:d8:16:8c:0c:4c:47:1f:af:4b:c4:4a:ac:2e:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:17:E7:FC:F5:0F:7B:96:B9:AC:86:93:58:3A:CF:A0:A9:C0:E1:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/05532e03-b3a1-3527-bf6a-64d41fa06e14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.crl
X509v3 Authority Key Identifier:
keyid:1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.202.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:6a:1a:b1:93:80:09:0b:33:dc:cc:68:22:48:e9:54:e7:dc:
cd:59:68:8b:f6:df:a0:19:e3:69:bd:a5:24:4d:c7:80:98:c9:
2c:c1:77:7f:66:90:ba:93:8d:2e:07:73:c3:6f:4c:3e:96:fb:
69:31:6a:5f:5f:73:8c:a2:0f:69:c5:1c:6b:a6:10:8c:56:46:
58:ad:4d:d8:2e:1f:82:3c:5b:37:51:f0:4c:46:eb:9e:cf:ba:
9f:ee:60:c1:82:f5:32:e3:dd:ff:13:91:95:26:6d:a7:9d:1b:
1b:90:df:4c:a4:e0:86:2b:c2:cf:d5:50:61:a7:04:68:1a:f2:
27:9d:01:cf:bd:1d:b6:46:93:c0:2b:ef:04:ab:34:64:25:70:
2c:9d:cb:35:43:c9:8c:a6:af:0a:bb:18:04:78:67:2d:c8:96:
d7:f7:4a:db:6b:45:ac:f7:3c:80:bd:91:a6:54:b2:2d:01:8c:
85:93:54:78:e7:92:d1:81:01:45:de:a7:79:87:8b:cb:d3:75:
33:03:07:c7:80:2a:df:ba:ec:d6:10:98:03:23:c0:b3:35:e7:
1a:f4:3e:1a:de:e8:7b:bf:b1:60:69:70:19:38:57:f9:9f:e3:
12:48:a8:13:ae:35:1b:3e:05:5e:9a:c5:6a:a1:e6:e3:c8:94:
dd:88:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:41 2025 by rpki-client