Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa
File: c93aa5cc-9725-3304-9f64-6159a1070c5c.roa (raw, json)
Hash identifier: fTo7VhSvztuXBL4DU/jMa5qC6Umjacm21lt6jt07dho=
Subject key identifier: 87:AF:91:0B:EA:B3:F9:FC:1F:4A:6C:96:98:32:2C:8B:B7:54:30:53
Certificate issuer: /CN=64c213c7-4c1a-4187-a879-90c9062e05d4
Certificate serial: 010D0C9F43285848DEA11D30EA96E86681645280
Authority key identifier: B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 8075
IP address blocks: 198.252.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:1d:30:ea:96:e8:66:81:64:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c213c7-4c1a-4187-a879-90c9062e05d4
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=4cc67343-1f7e-4078-a383-0e6c436e9307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:66:4b:57:71:af:bd:36:03:f9:f7:10:3c:
98:17:fd:c3:a8:c5:93:60:bb:e8:92:fe:9e:2e:95:
56:3b:0a:ee:5d:ad:aa:ee:f6:54:0a:74:ec:a3:5d:
d8:c2:71:83:48:81:5f:26:47:e2:da:47:e6:e4:d7:
36:64:74:2a:37:fa:87:d9:3a:10:c8:46:1a:3a:a3:
f0:2c:10:f1:c8:29:de:62:6d:32:e2:75:69:3b:d4:
fb:fb:90:66:29:bb:53:ae:68:4f:a1:0c:c2:10:9c:
59:41:ea:4a:e4:7f:3f:ae:a3:83:7e:ec:2d:1c:0b:
25:6b:05:4a:9a:e1:0b:84:fd:05:70:40:a5:ab:62:
18:4c:10:96:42:4c:99:f4:d0:d7:c8:03:90:79:19:
fb:f3:c0:ec:bc:a3:bf:39:83:6c:23:13:76:c8:75:
51:6f:dd:33:79:22:b7:ac:70:a5:93:67:da:b9:7b:
44:d8:39:3c:07:b4:75:18:82:90:ba:60:a0:bc:6d:
5a:af:7b:9f:69:3f:c8:a1:07:92:ad:16:dd:80:81:
4e:fc:18:99:fa:cc:cd:36:15:f9:7b:6f:6b:ab:07:
7e:36:03:b7:e9:aa:a8:ee:d3:a1:55:0a:12:57:aa:
26:76:c3:97:b7:26:aa:ca:3c:22:65:16:48:a4:fe:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AF:91:0B:EA:B3:F9:FC:1F:4A:6C:96:98:32:2C:8B:B7:54:30:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl
X509v3 Authority Key Identifier:
keyid:B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.252.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:b6:e8:6e:87:dd:41:6c:1f:59:4b:63:9a:d5:87:60:5d:57:
16:34:72:52:3c:74:5b:a0:c3:ea:0e:13:74:c3:26:c8:6b:18:
ae:29:56:e2:a5:33:92:b4:e5:8a:da:a6:6b:ab:4b:01:42:24:
ca:78:07:60:ae:ac:10:fb:88:f8:1f:4b:98:ea:6f:7b:15:a3:
94:8a:58:78:d4:f5:ca:90:fa:6d:1b:33:2f:b6:f8:c2:34:f9:
c1:42:f2:5c:cc:4b:65:ef:80:fb:7a:6f:2b:d9:5b:96:33:90:
e7:ba:3d:f2:a4:7c:15:a9:a5:ee:f0:0a:4a:71:8f:83:6c:ae:
4d:e6:71:23:ba:cd:e2:4f:cb:80:f7:35:2c:ab:79:89:23:68:
d2:1b:46:e6:73:25:69:6c:f0:92:b5:a7:10:2b:f3:31:94:16:
5f:89:78:d9:f3:6a:22:04:41:bc:35:ff:72:bf:97:7a:ec:2a:
76:e7:7c:ae:44:11:be:25:9f:a6:54:a8:3a:df:24:49:fc:58:
97:e8:28:03:16:cd:0f:e3:a0:6c:2d:b7:92:8e:d9:10:7c:67:
e6:f2:5b:a1:a4:fc:98:1c:f8:4b:24:bf:8a:f8:c4:eb:60:87:
32:53:44:e2:e4:91:1e:7c:b2:f3:14:34:e7:4a:c8:40:0b:3e:
12:ff:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:57:25 2025 by rpki-client