Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/b007bb4b-e602-3518-bbf9-c8f5e532bcd1.roa
File: b007bb4b-e602-3518-bbf9-c8f5e532bcd1.roa (raw, json)
Hash identifier: 9y06ogVvYSlyoT+MWDZP+Kvsqlt8JkyjUFgiiziZKIQ=
Subject key identifier: 94:81:DC:9A:6A:0D:2C:DD:32:7D:D4:E8:F2:A2:E1:28:5F:B0:4A:DC
Certificate issuer: /CN=64c213c7-4c1a-4187-a879-90c9062e05d4
Certificate serial: 010D0C9F43285848D641105C2731E09110F98620
Authority key identifier: B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/b007bb4b-e602-3518-bbf9-c8f5e532bcd1.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 1798
IP address blocks: 198.232.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:10:5c:27:31:e0:91:10:f9:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c213c7-4c1a-4187-a879-90c9062e05d4
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=4850e70e-8516-4ec9-b46f-6d6bfcacbe73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:92:18:41:0b:6a:59:af:36:a7:a7:f0:5c:55:
bf:09:2a:bd:dd:db:47:8c:b4:15:ee:96:7e:a3:e1:
ce:d9:a4:10:18:4d:b2:14:93:c1:2c:c5:f3:b0:8c:
12:36:04:00:8e:99:ca:8e:69:7b:0c:68:8e:4e:f3:
ed:a2:72:ab:8a:29:2e:2d:11:30:52:81:bb:13:f1:
15:8c:4a:54:59:a3:0d:e1:21:20:5c:1c:f5:84:b8:
03:90:25:db:f2:19:16:ff:75:e2:f3:4c:81:40:0b:
88:c9:d7:b9:1a:5a:cc:74:ca:3d:85:f7:d3:7b:b9:
cb:1a:04:3a:7a:85:7b:ef:12:68:e6:28:0e:e9:8c:
9c:b7:fa:d6:a8:df:85:d2:d7:94:51:81:df:de:d5:
b0:3e:00:1b:6c:d3:cc:9a:4f:87:0c:d8:03:36:4d:
82:7d:d8:56:26:91:8b:48:0e:bd:e8:86:eb:57:93:
d7:08:f7:90:8a:fa:c4:4f:4b:c2:81:98:fd:d7:e1:
23:4a:fd:ad:58:6c:4c:1b:c9:e8:f1:22:17:54:24:
14:39:43:0e:78:f9:80:6c:63:4c:7b:8f:4d:25:ab:
ee:f8:3a:0e:ec:13:60:7e:25:98:b4:ea:ec:19:3d:
1a:de:2d:f1:d4:b5:32:5a:d3:ed:c5:82:88:82:4f:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:DC:9A:6A:0D:2C:DD:32:7D:D4:E8:F2:A2:E1:28:5F:B0:4A:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/b007bb4b-e602-3518-bbf9-c8f5e532bcd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl
X509v3 Authority Key Identifier:
keyid:B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.232.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:4d:10:a9:af:99:25:45:34:f9:44:34:16:0f:ce:81:68:18:
be:94:38:ea:4b:f1:3e:ae:55:1a:1b:3c:60:15:a9:a2:39:3d:
5a:b5:96:af:65:60:64:78:67:13:5e:9e:b6:6b:af:af:57:43:
6d:45:33:3b:9a:e2:39:f1:60:f2:f7:23:4a:76:eb:2f:ef:1e:
49:09:08:80:20:2e:f7:cc:5b:4c:60:54:9f:6a:b2:82:6e:5d:
64:d2:6e:d1:84:57:e0:4b:52:b2:2f:45:0c:68:37:7b:6d:7b:
2b:65:5b:ff:c9:e7:2b:b8:27:a5:a8:10:d8:dd:39:4f:77:15:
45:d7:11:23:08:a3:b8:9e:6c:96:18:cd:1b:92:94:3f:28:8a:
e9:69:6f:43:f3:75:34:7a:ad:c1:6f:bf:87:1e:59:cd:1a:cd:
03:3c:f2:c5:61:09:8c:b3:61:37:0e:a5:d2:20:0c:e8:3e:60:
a5:35:bc:74:24:50:db:de:8b:be:07:3d:5d:ad:c0:84:6e:a5:
9c:d6:ad:2a:68:43:0d:6e:97:36:d7:53:04:e7:a5:11:b8:ec:
06:72:52:c6:34:d2:07:77:dc:e2:16:5d:f9:7f:02:89:51:5e:
39:3a:51:d1:81:a5:a4:9f:be:fe:fc:74:28:1f:d7:61:47:fa:
8a:0e:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:48:20 2025 by rpki-client