Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a972efe2-b857-3fbf-a105-b0c8be4f992a.roa
File: a972efe2-b857-3fbf-a105-b0c8be4f992a.roa (raw, json)
Hash identifier: Tl9S38mel57je0J0fGE+JKMzWqni4vOHSbUgrCiTpjA=
Subject key identifier: 60:40:0E:15:C4:68:76:58:ED:E7:35:00:64:64:38:B0:67:96:82:16
Certificate issuer: /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial: 010D0C9F43285848EC96865639BEBB11CACE6900
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a972efe2-b857-3fbf-a105-b0c8be4f992a.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 198.176.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:86:56:39:be:bb:11:ca:ce:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=23636fa1-de35-4c61-b29e-4dedd255eb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d0:13:ac:29:84:9c:d9:8a:23:09:57:46:c4:
af:f6:f8:d2:3c:03:a5:62:da:a3:03:4b:21:97:2c:
c3:b6:cf:49:63:6d:85:27:a0:a5:2e:d9:8d:19:e6:
29:c6:27:8f:5a:ba:49:1f:f8:ae:f5:01:69:ea:d8:
85:d7:14:4a:4a:5f:a1:14:2a:e0:70:05:5f:c4:89:
0d:c3:43:a8:03:62:22:dc:80:72:2f:82:bc:52:69:
7a:90:42:9e:1f:4f:24:67:2d:c6:88:41:87:cf:34:
4e:d7:b0:a8:1c:8e:a4:ec:d3:5a:f6:2a:e3:63:1c:
93:cc:6b:7f:b4:37:ec:af:d7:76:00:96:08:88:46:
a0:01:f3:53:cb:bd:3a:fe:81:b8:bd:ea:53:87:d6:
f7:05:b8:89:35:b7:98:1b:a2:f3:62:4e:11:12:ff:
e7:13:ab:5a:b1:71:04:2b:c1:5b:d5:b8:83:17:34:
e6:63:79:ea:29:85:6c:f9:8a:11:bb:73:43:cb:2f:
f2:2b:ba:59:9c:97:ce:40:24:d3:ec:01:32:7e:30:
c8:a0:96:68:44:ff:6d:97:94:94:6c:f1:ac:19:5e:
2a:7b:1c:c5:3f:eb:98:6e:3c:e6:bd:22:72:df:e6:
f2:80:08:01:a9:fd:bf:28:30:01:d0:32:e2:fe:c9:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:0E:15:C4:68:76:58:ED:E7:35:00:64:64:38:B0:67:96:82:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a972efe2-b857-3fbf-a105-b0c8be4f992a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
X509v3 Authority Key Identifier:
keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.176.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ab:dd:79:98:b8:a9:cc:1a:c5:67:25:fd:ae:b8:d2:87:2e:
08:51:79:96:2d:f4:c6:7f:b3:e3:81:14:ee:cd:26:5f:47:c3:
4b:50:33:c8:8f:8b:78:d8:73:2a:93:96:c4:19:cf:8c:d2:62:
39:d2:0a:06:85:51:1b:b3:25:d4:60:46:ae:04:da:44:6c:cb:
80:06:77:63:c1:6a:27:d4:bd:38:4c:73:a0:c1:97:da:1e:be:
5e:12:f1:3e:d2:60:8a:20:c4:23:4f:5b:b2:29:6f:bf:4b:65:
7b:f5:10:f7:29:ed:5f:f6:a9:06:72:5f:c7:ba:df:a6:30:63:
cd:54:5d:e6:1e:f5:8d:70:81:d5:c6:d0:ec:ec:79:c6:96:ef:
b6:86:e9:dd:f8:c4:44:81:8e:51:6b:6f:57:aa:dc:05:d8:1f:
5f:22:30:9b:0d:ba:b4:3f:1a:96:7a:3b:19:37:b3:df:27:48:
50:7e:60:c9:94:5f:52:95:a9:6b:5a:3b:3b:dd:81:31:35:ce:
a3:1d:da:3f:14:b8:a7:51:f2:2b:f1:f6:a8:47:bd:06:07:40:
8c:9d:17:e7:0e:f1:48:e3:69:4e:17:4e:b3:93:73:1e:44:c1:
2a:09:94:0e:2c:63:90:46:2f:9d:0f:ed:04:3a:27:d0:c1:e2:
be:8a:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:30 2025 by rpki-client