Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed3a5a88-86fa-36da-a653-e12390ec8538.roa
File: ed3a5a88-86fa-36da-a653-e12390ec8538.roa (raw, json)
Hash identifier: nRVfGBtBKWT9KBC2xLdcRBMvqAzKxFhZ1TByEtuaTCo=
Subject key identifier: 61:67:A3:7A:25:D4:B4:58:0F:DD:F4:53:26:11:6A:BF:99:79:8B:7E
Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial: 010D0C9F432858492A22B36B4FD0E825155A2F80
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed3a5a88-86fa-36da-a653-e12390ec8538.roa
Signing time: Wed 12 Mar 2025 15:07:42 +0000
ROA not before: Wed 12 Mar 2025 15:07:42 +0000
ROA not after: Tue 10 Jun 2025 15:07:42 +0000
asID: 64267
IP address blocks: 198.1.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2a:22:b3:6b:4f:d0:e8:25:15:5a:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Validity
Not Before: Mar 12 15:07:42 2025 GMT
Not After : Jun 10 15:07:42 2025 GMT
Subject: CN=9e4222a4-cd00-4b64-9c64-69f69457550e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:d2:d7:1e:9e:b9:eb:37:24:a7:6f:39:07:
59:d2:86:63:6b:9c:e7:ee:d6:01:81:a5:e0:fb:cf:
5a:80:00:70:52:e3:06:0d:f1:bf:00:02:8c:68:72:
56:7f:f8:a7:b3:bb:08:c4:42:57:a4:bf:f5:29:db:
0e:81:c7:43:1f:a2:06:7c:62:f2:0d:79:c2:66:a6:
cc:ff:9d:4f:64:4b:0d:f7:51:40:fd:6d:f2:56:df:
a0:c8:8d:38:54:89:53:93:a4:ec:77:cb:d7:11:61:
8f:20:63:ef:f8:cc:6e:54:32:45:4f:6d:c9:a9:31:
12:73:dd:25:eb:f3:a6:ed:05:75:06:b2:d0:d4:c1:
ba:bd:10:5a:34:2d:d0:11:6b:3b:e6:7c:81:c5:53:
67:de:8b:fd:fb:68:2f:5e:59:66:32:58:00:3f:00:
63:90:3d:49:4a:17:ec:c8:fc:55:d2:0c:4a:25:51:
97:2e:60:f5:ee:ff:5a:bd:ac:a9:bb:96:89:f7:01:
bd:2b:77:67:a7:2d:14:57:83:40:10:0d:3e:03:be:
d8:5b:16:47:34:dc:ee:84:97:7d:50:38:c5:73:73:
61:d2:14:d8:a6:4e:94:43:c6:29:cb:a8:79:ad:6c:
0b:43:d1:74:b5:a2:5b:fe:fb:9f:cc:48:b6:2a:58:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:67:A3:7A:25:D4:B4:58:0F:DD:F4:53:26:11:6A:BF:99:79:8B:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed3a5a88-86fa-36da-a653-e12390ec8538.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
X509v3 Authority Key Identifier:
keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.1.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:31:93:f0:81:76:c2:7c:a1:15:a0:ab:30:69:c7:99:95:bb:
c3:58:4f:ad:1a:a3:5c:fc:0c:40:e0:39:a5:af:66:03:b3:4e:
e7:e2:de:aa:85:4a:8b:27:33:cc:95:9b:d7:9d:15:99:56:61:
3f:05:8f:97:a3:83:c7:4a:da:45:19:00:ca:91:65:95:44:18:
7b:02:79:40:f4:33:82:40:9a:83:9b:8a:9e:5c:e8:fb:ce:89:
39:2d:09:50:01:5c:9c:6b:ad:a8:30:0a:5c:eb:e5:78:7b:2e:
d2:28:b4:d7:9b:10:f1:2c:5c:ec:1a:c8:24:c5:a1:53:65:ac:
b0:7d:39:b1:c6:01:a7:d7:24:01:6c:61:20:40:69:36:1d:d0:
76:0b:4f:13:49:24:48:cd:92:3e:1b:ee:33:b6:62:48:e5:b5:
f5:e5:1b:e2:71:cb:d0:87:7e:79:3a:0e:94:73:14:e3:3a:ca:
a5:87:0d:0c:5b:47:4c:97:fe:ce:52:3a:74:be:8e:86:51:0b:
69:ba:5c:80:c9:9b:af:ce:81:bd:38:7a:0b:5c:e9:6d:14:4e:
2d:21:ea:7e:73:56:71:18:d7:0f:28:b6:cb:4e:c1:b3:4f:ff:
bd:f2:6e:5e:99:20:45:ff:b1:45:bc:bc:70:17:4f:0b:e6:6b:
50:a0:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:04 2025 by rpki-client