Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ab2f321e-03b1-3793-839e-0511ef8aaa27.roa
File: ab2f321e-03b1-3793-839e-0511ef8aaa27.roa (raw, json)
Hash identifier: 4IRWVTMPfjW1/9YBW7VKb7ucU/hGwA5r+dp5sN/bYLE=
Subject key identifier: C5:20:B3:D1:94:FC:55:85:10:77:3B:52:9A:A4:D5:D3:0A:E5:AA:79
Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial: 010D0C9F432858488815E4AB4FEA77118B6A7600
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ab2f321e-03b1-3793-839e-0511ef8aaa27.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 64199
IP address blocks: 198.178.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e4:ab:4f:ea:77:11:8b:6a:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=4964d515-e882-41ba-b7f3-5a259fd8df16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:1f:16:9d:33:be:a6:dc:bf:74:c7:d9:52:
ce:36:26:75:1f:53:4b:d7:14:f4:a5:b6:19:e9:65:
fe:58:28:29:8b:fa:0c:bc:6c:03:a0:60:2d:d7:ea:
b8:b9:c7:52:fb:0f:24:81:56:ad:e1:6d:8d:26:30:
bb:67:11:b2:9e:08:63:78:d2:20:1f:5b:11:5e:d4:
e5:01:0b:89:eb:73:8c:aa:86:cc:a0:e5:90:b7:24:
88:c0:48:56:a8:ca:0b:4a:71:09:b3:6f:e3:ad:22:
39:72:2c:c0:08:eb:a7:18:cb:b3:33:ec:e8:cb:ee:
a7:cd:13:d4:d4:37:34:12:5e:d4:be:5e:e5:49:59:
49:cf:dd:74:50:6d:88:a4:b3:96:f3:da:f7:ae:dc:
fe:e8:ed:11:f0:d0:32:fd:4c:d2:dd:4c:2b:fd:a0:
d7:1d:a5:1c:af:3d:96:df:2d:c0:fa:ce:0f:66:53:
b6:28:1e:61:b5:d2:63:55:ae:fb:50:02:72:cf:84:
20:0e:95:d1:03:e8:27:39:f3:ac:00:9f:c5:66:d7:
96:a0:56:55:ca:24:9b:ab:e8:08:be:bb:b9:f4:22:
45:0a:af:90:6f:b4:42:b8:82:c3:ca:ad:0b:d6:fe:
27:91:c0:14:df:35:ce:28:a4:09:66:08:2a:8a:f5:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:20:B3:D1:94:FC:55:85:10:77:3B:52:9A:A4:D5:D3:0A:E5:AA:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ab2f321e-03b1-3793-839e-0511ef8aaa27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
X509v3 Authority Key Identifier:
keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.178.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ca:52:a1:0e:30:05:22:0c:82:a3:99:8e:08:a5:f6:26:ce:
ce:5e:f3:b7:38:5d:68:78:98:b0:dc:c1:cb:1e:d5:91:48:bc:
66:b8:1e:63:07:6c:23:da:5c:dc:26:95:2a:12:82:75:62:06:
f8:f2:7d:fc:d5:ec:b4:02:62:c9:48:e1:f7:c8:00:51:29:67:
a7:cd:99:2f:7a:f3:75:96:a0:75:f6:03:7a:c1:df:cf:28:1c:
a6:6e:fe:c3:d9:2a:0a:3f:6f:57:70:cc:2c:88:eb:10:19:70:
d8:82:5c:bd:96:48:63:eb:03:2e:b9:a5:7c:38:73:74:f1:d1:
39:e2:0a:47:9d:97:d9:b8:90:7b:6a:15:ac:44:d8:5a:e4:a5:
99:3f:dd:36:a4:70:3f:71:aa:73:92:7a:ce:fe:36:5b:24:16:
68:a7:29:43:e3:1d:47:5c:bd:73:6a:83:95:a0:cd:f7:52:b1:
6a:f2:e9:d2:38:d0:42:79:5f:76:78:e9:9b:ce:e6:49:d4:e5:
26:5d:2d:43:f3:c2:70:e8:64:c9:57:d5:de:f8:fd:61:3b:c8:
8c:a3:56:85:a8:f0:72:1b:66:17:5d:ee:50:ea:af:16:d0:6c:
d8:03:f7:77:7d:f7:a0:6a:f9:4d:23:7c:2c:d6:90:30:05:97:
35:fc:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:38 2025 by rpki-client