Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9/46df5be5-30c0-3e90-8da1-cb72b0d980f6.roa
File: 46df5be5-30c0-3e90-8da1-cb72b0d980f6.roa (raw, json)
Hash identifier: pLobVFcGfnbAZ4q8z0jFpE7ULptnAhJTEWSdfiVglzU=
Subject key identifier: C4:EB:28:6D:4C:28:1E:0F:39:68:6A:0B:1A:DA:DF:14:F5:64:36:BC
Certificate issuer: /CN=77910977-6e5e-4238-9d63-69bc88efa2f9
Certificate serial: 010D0C9F432858488DAB405B75030567B370B000
Authority key identifier: 7B:F0:C9:95:F3:52:C4:F1:0D:D7:9B:2F:5A:B4:9D:94:E2:C9:80:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9/46df5be5-30c0-3e90-8da1-cb72b0d980f6.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 398395
IP address blocks: 198.45.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:40:5b:75:03:05:67:b3:70:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77910977-6e5e-4238-9d63-69bc88efa2f9
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=2179b591-1487-45c0-8ef6-f3af7807735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:13:a7:f3:ed:c7:e6:2b:6a:85:10:0b:d1:
09:84:9c:e1:c8:4d:e9:cf:5c:fc:36:4b:b8:4a:0f:
62:a1:32:86:36:f0:a8:c4:a2:b8:d9:06:ad:c6:53:
77:49:da:8d:e6:95:db:62:ba:47:67:eb:37:a8:92:
7c:dc:e8:8e:c1:da:13:db:02:39:05:50:dd:57:dd:
24:26:a8:7d:21:05:af:fc:6c:c4:8a:87:cb:8f:c3:
40:b8:f8:06:ed:73:e8:33:0b:53:3a:57:f2:eb:e0:
49:88:36:c0:88:0c:20:28:ce:a7:86:c0:d6:19:de:
3d:9d:7b:63:89:02:a1:32:aa:cd:88:92:36:e2:9e:
f2:03:b1:6b:36:09:34:e0:c8:d6:e0:84:70:56:df:
b8:31:84:c2:19:09:3f:d2:9e:0a:55:88:40:7c:e7:
23:d6:47:ba:7b:c1:9a:59:eb:7c:b2:6d:96:b8:ca:
1b:7b:65:bf:de:20:c1:55:2e:e5:fa:80:44:f8:aa:
b9:fd:0d:52:c4:95:0b:86:07:f8:f3:41:92:84:29:
a5:a2:79:ac:d7:77:7d:1e:42:ee:73:17:aa:c0:b1:
4e:0c:0a:bf:29:94:e6:f3:bb:53:be:69:b9:9e:a3:
1e:b7:f7:3c:3f:67:f4:67:dd:38:ee:99:79:dd:3b:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:28:6D:4C:28:1E:0F:39:68:6A:0B:1A:DA:DF:14:F5:64:36:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9/46df5be5-30c0-3e90-8da1-cb72b0d980f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9/77910977-6e5e-4238-9d63-69bc88efa2f9.crl
X509v3 Authority Key Identifier:
keyid:7B:F0:C9:95:F3:52:C4:F1:0D:D7:9B:2F:5A:B4:9D:94:E2:C9:80:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:79:4b:f0:76:89:4b:92:55:55:23:9c:97:49:6a:02:02:15:
9f:92:fc:ec:0e:b2:b1:84:b3:35:f0:f7:02:c2:64:05:90:84:
02:08:e5:d5:de:05:86:d8:94:44:0f:b0:04:d2:3d:84:12:50:
68:ea:f2:c1:bd:bf:49:bb:82:ca:9b:43:02:4d:e6:c2:85:7f:
35:ca:27:2c:04:4c:e1:1c:ae:ce:e0:b8:ee:5a:a7:e1:eb:3b:
d6:fb:91:62:88:22:57:a5:a4:11:65:62:c6:f7:70:2c:15:fe:
ab:72:12:3b:89:bf:a0:44:9c:a2:66:4c:7a:0a:79:9e:3c:c7:
65:90:e3:67:1a:66:57:35:bf:92:77:27:31:33:5c:28:59:9f:
d0:3b:86:2b:a3:50:ee:fc:4d:2d:36:3f:5d:61:a3:3b:a9:6a:
50:d0:fb:42:f4:d0:4b:55:93:33:56:21:37:6f:e9:34:3e:b6:
42:5a:a0:82:32:c7:4b:93:fe:4d:00:59:29:df:df:e8:c0:23:
84:a0:7b:7e:10:c1:25:98:67:28:24:dd:3c:e1:d3:9f:18:aa:
ee:54:fd:b6:40:18:14:49:8b:ea:9e:28:a5:30:a8:e1:96:9f:
a9:12:9b:d6:84:8f:4f:c1:89:56:1f:8d:00:12:a1:83:33:6a:
8a:ba:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:29 2025 by rpki-client