Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa
File: 23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa (raw, json)
Hash identifier: krkffDoXQm2SM81xdAcMl0o4rpZJQvVf3zK5opuVrkM=
Subject key identifier: CB:12:15:4D:EC:4E:E3:37:5A:4A:A5:92:2D:1E:B8:1F:85:EE:CD:09
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848811B104CC299735620397BC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 55286
IP address blocks: 198.89.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:10:4c:c2:99:73:56:20:39:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=500b4b42-ace1-47b8-8922-ffe642a179a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:9f:40:ef:94:44:00:5f:de:6c:61:43:12:
e7:96:28:c3:65:29:dd:cb:25:fe:79:75:2d:99:8e:
1b:a6:e9:e3:eb:de:12:63:2e:bf:17:f2:62:90:e2:
be:0d:8b:22:a3:25:d2:0b:4e:7d:dd:e1:56:78:70:
c0:7f:ee:3d:36:fd:78:c2:94:d0:6d:b2:71:03:3c:
1e:61:91:73:11:8c:52:68:7c:c9:fe:59:02:00:ee:
d0:5f:04:f7:3b:e7:0b:ea:89:93:83:6b:af:86:2f:
fe:b4:98:d5:6d:21:72:e4:7f:ec:bc:51:e0:e4:00:
eb:fb:b8:71:35:66:01:8b:4d:c7:0d:72:49:ac:a2:
84:94:fa:ff:51:4f:88:94:98:77:73:8d:1c:ad:d9:
30:e4:9a:b8:54:64:e1:47:af:ee:8e:93:71:14:e5:
24:f3:c2:ca:a2:a8:fa:80:f7:40:84:33:c7:46:b1:
75:21:55:8b:f0:76:fb:90:34:70:46:45:f9:e0:10:
be:57:39:d3:11:9d:ac:d2:5e:ed:dc:3c:81:98:6c:
3d:28:55:3f:59:78:40:83:f4:da:77:73:80:92:ce:
9e:d2:62:fc:ce:9c:86:dc:ce:57:39:b9:8e:4e:1e:
e4:8b:56:bc:79:f1:49:36:80:67:cd:f0:6c:22:ef:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:12:15:4D:EC:4E:E3:37:5A:4A:A5:92:2D:1E:B8:1F:85:EE:CD:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
198.89.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:1b:d9:1a:bc:8b:71:cb:b5:0c:b4:b6:a1:e0:35:51:ad:18:
ca:78:43:45:bb:87:1f:70:08:88:5e:cf:91:55:d5:f5:77:f9:
0c:0e:39:3d:5d:2b:ae:e6:6d:15:37:3b:71:1c:29:86:0f:21:
53:d8:16:0a:95:b6:7d:4e:38:18:48:34:e2:cf:1f:c8:6e:59:
3f:28:63:d6:4e:44:72:aa:05:dc:3d:4a:fd:8c:58:9d:da:63:
39:48:f8:d1:ce:a1:c4:76:13:3c:e3:6b:73:69:cb:70:46:3f:
a5:bd:84:b6:c0:3c:be:62:e7:03:bb:a0:a3:97:3a:4c:59:db:
c0:5e:0a:93:13:65:67:22:95:6e:19:0a:f2:b9:36:36:03:21:
1b:9c:84:b5:b5:8c:30:4f:c8:58:68:04:66:44:7c:b6:7a:4e:
3b:60:9f:37:93:6d:48:ef:0f:ea:18:6c:30:a4:c0:3f:ae:30:
6f:83:c5:70:03:9a:92:9f:67:5f:6a:00:63:66:c8:53:8a:27:
38:91:e5:99:b7:8b:3f:76:2e:f3:02:71:bb:00:b9:36:62:1d:
c7:35:06:2e:8c:f9:94:37:7d:80:88:5e:f5:34:19:62:d7:e7:
a8:4f:b0:79:a1:e0:fa:50:4d:c0:37:bc:51:3b:94:84:f2:6a:
38:48:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:05:50 2025 by rpki-client