Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/a0ea587d-3661-3a92-985e-52bc85f90a1c.roa
File: a0ea587d-3661-3a92-985e-52bc85f90a1c.roa (raw, json)
Hash identifier: 4VY37HkiOAJVvqGz1zCXSsdyGMfecKKAIWjuc0D1xHE=
Subject key identifier: 4B:D1:2C:5B:27:10:0F:DA:C3:DF:3A:1B:2C:28:45:E0:F0:C4:1F:02
Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial: 010D0C9F432858492093FC639B42B63CD67361C0
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/a0ea587d-3661-3a92-985e-52bc85f90a1c.roa
Signing time: Sun 09 Mar 2025 04:57:52 +0000
ROA not before: Sun 09 Mar 2025 04:57:52 +0000
ROA not after: Sat 07 Jun 2025 03:57:52 +0000
asID: 64199
IP address blocks: 198.178.119.64/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:93:fc:63:9b:42:b6:3c:d6:73:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Validity
Not Before: Mar 9 04:57:52 2025 GMT
Not After : Jun 7 03:57:52 2025 GMT
Subject: CN=bd274862-94dc-40da-9f8f-4a5b03b79968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a3:27:93:9c:e6:6d:35:d6:f4:0c:2c:55:0d:
ee:ac:5c:3b:cd:16:2a:67:61:3e:ea:92:a8:7c:dc:
71:08:e5:25:4e:b2:a8:19:db:9a:81:5e:b4:4d:13:
2c:f7:96:1c:29:20:fb:d8:d4:cf:6c:6d:f2:54:b4:
58:af:34:05:7f:74:14:56:78:70:33:be:68:cf:31:
88:03:80:16:e4:a3:7f:8c:71:ac:b5:aa:ae:14:18:
40:2f:8f:c0:ae:e8:cb:9d:b1:84:27:1c:ed:c6:f2:
82:b0:85:d9:c0:68:e4:88:24:90:e0:9a:ae:84:f4:
83:00:23:6d:96:db:9b:83:98:10:3d:aa:36:d3:48:
95:73:e0:3b:7f:7d:91:b9:b8:ca:c9:8c:f2:16:4a:
5b:98:03:67:e5:54:86:6d:a7:f5:77:91:be:c1:7b:
23:4f:78:05:a8:e8:51:38:f5:2f:8c:12:df:6b:55:
e9:28:b8:d5:4c:0a:f8:94:e5:3f:98:56:84:a3:93:
8a:04:ad:a6:34:20:c3:c0:5c:7a:0f:14:07:ea:74:
ca:00:a4:8f:5d:1c:f4:e2:25:4c:4f:c3:f5:40:88:
35:81:80:7d:0c:42:4f:00:a3:90:2b:db:ca:6a:56:
1d:e1:41:ff:86:eb:12:d1:e0:08:d8:4a:b7:f0:b8:
2f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D1:2C:5B:27:10:0F:DA:C3:DF:3A:1B:2C:28:45:E0:F0:C4:1F:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/a0ea587d-3661-3a92-985e-52bc85f90a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
X509v3 Authority Key Identifier:
keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.178.119.64/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:9b:f5:aa:c7:f3:0e:4a:bf:6e:de:58:2b:05:70:d3:cf:37:
f7:03:8f:cf:24:38:6e:75:2c:fd:cb:81:8d:95:d7:9c:4f:9e:
04:2a:6f:24:98:d7:67:88:c1:1e:34:f5:3d:62:34:41:0a:43:
db:a2:24:e1:16:8d:e2:d0:9f:34:96:a6:e2:f6:3e:47:c4:d6:
2d:03:86:a4:b1:62:e8:27:b0:9c:a9:67:b0:7b:93:c7:f0:c4:
98:b6:45:f6:63:fb:72:f7:d2:96:e7:58:11:df:a6:87:50:4b:
c0:7a:b9:0c:70:02:70:53:3c:85:56:83:c6:f0:4d:96:c0:8e:
7c:06:4f:52:21:06:c4:82:db:e4:b2:d4:a2:ac:79:ad:bd:5e:
d6:93:64:f4:48:b5:a4:ea:2b:cf:08:5f:f4:da:9c:57:e8:41:
40:79:61:18:78:bf:a3:cc:24:27:38:c1:93:89:df:e4:97:86:
39:54:26:c2:25:b9:fc:29:12:29:16:c8:9d:b5:ed:5a:50:8f:
60:5f:29:39:09:08:66:ce:08:d2:02:d6:68:64:78:8c:b1:dd:
ea:7c:b6:2f:32:8f:7c:fa:76:c2:fc:93:dc:ce:ca:4c:fc:15:
01:07:23:50:d4:8c:3f:28:d9:77:72:57:be:f7:e0:bf:b2:eb:
1f:6c:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:30 2025 by rpki-client