Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa
File: 7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa (raw, json)
Hash identifier: cs08bsU1qJyL0HRaxrE52Zllf+rFAv7GKcodwRVWQPI=
Subject key identifier: 38:B7:78:97:D9:2A:34:DB:F1:64:DF:84:E8:BA:76:0F:5A:84:21:25
Certificate issuer: /CN=69e23836-98b5-4802-9778-a96a5ee3eac3
Certificate serial: 010D0C9F4328584944693A30A3842451746CAED0
Authority key identifier: F7:F4:4E:36:F2:8E:E6:3B:90:99:EE:39:FC:A9:72:F5:D6:4E:E4:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 8075
IP address blocks: 198.47.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3a:30:a3:84:24:51:74:6c:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e23836-98b5-4802-9778-a96a5ee3eac3
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=421dc3a7-f0f7-4fe4-a662-b42d1639569e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:da:86:f2:7a:86:24:2c:85:18:15:5a:d9:
1f:f4:6c:ef:33:2a:62:e8:00:94:a8:10:8f:88:da:
b9:f0:3a:3e:44:8c:46:83:34:cf:ea:e4:86:fa:0f:
ce:36:ac:6f:ab:b9:35:63:34:ff:7e:50:c2:08:d3:
20:d6:ac:62:21:5e:a3:8c:84:74:5f:18:ec:12:90:
51:76:04:97:8a:bc:b7:b4:35:ae:8f:cf:9c:27:c9:
b4:88:3e:53:ed:69:fe:94:f1:88:a2:c3:1a:ee:66:
84:99:9f:78:b8:7b:6c:2d:f0:df:a3:e0:fd:aa:0e:
c0:06:3c:df:cb:4d:4d:8d:5b:92:51:05:1a:0d:7e:
9a:12:d1:a5:f0:25:26:6e:65:84:7e:68:12:32:00:
56:e5:0d:fa:29:1f:b5:c2:f4:0e:74:c2:68:76:88:
b7:f2:a5:c9:bb:bb:29:c0:9e:12:85:4d:20:69:85:
2a:60:a7:60:3e:11:54:93:74:33:79:f3:6e:f7:9c:
37:d1:6d:23:a6:53:36:0b:59:5b:2d:b0:c1:da:2f:
44:ab:43:ec:ba:23:eb:29:95:49:8c:47:96:d1:c3:
94:0c:40:12:8b:80:0e:20:94:4f:66:ac:f4:96:8d:
28:f4:ee:c4:a5:34:04:b5:f4:63:00:96:7e:db:d4:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B7:78:97:D9:2A:34:DB:F1:64:DF:84:E8:BA:76:0F:5A:84:21:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.crl
X509v3 Authority Key Identifier:
keyid:F7:F4:4E:36:F2:8E:E6:3B:90:99:EE:39:FC:A9:72:F5:D6:4E:E4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.47.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:08:a8:31:a5:06:43:30:7d:4f:c4:0b:d2:4f:01:0d:9d:c7:
f7:51:8f:22:22:9f:8a:35:33:73:85:d5:62:61:57:04:48:e5:
f5:6e:c0:63:3e:16:51:d2:c2:4e:64:81:60:51:0e:e8:c2:bb:
6b:59:35:e8:c9:2e:af:8c:13:ff:02:09:f5:9d:ff:aa:8c:f2:
83:11:f0:3f:33:fb:53:61:8b:34:7f:f3:51:c6:ab:95:ae:d8:
3c:9a:3c:06:5b:69:92:57:98:a7:c0:99:10:14:ce:13:e8:e0:
80:bf:ca:be:45:5f:76:c6:5d:d9:15:60:ec:91:12:ef:57:93:
4f:a9:9c:bf:c8:87:72:9f:74:fc:be:1a:b4:74:72:ab:bd:1e:
29:ae:0b:00:1c:5e:c6:af:d2:67:dd:5a:9a:d0:15:13:4a:85:
39:f1:b5:df:67:9c:4a:8f:58:6d:2d:ac:41:e6:36:13:93:6b:
fe:ef:95:bc:5e:58:de:20:b9:c7:cd:66:ca:d5:c5:02:24:aa:
9f:f2:f1:42:b1:fd:23:cd:ce:58:e6:bb:5d:0b:a9:62:6a:15:
8a:30:8c:3d:8a:1a:43:cc:47:81:c8:47:f2:01:44:78:01:40:
e7:63:fa:a5:f1:42:d3:ea:e1:bc:e4:83:ce:ba:05:24:62:80:
96:4e:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:45 2025 by rpki-client