Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/edff4cf3-1c4e-3ee7-95fb-afdeae5d2e69.roa
File: edff4cf3-1c4e-3ee7-95fb-afdeae5d2e69.roa (raw, json)
Hash identifier: oUl6ghsTFTTZfwlFERrbRKxcgmmqtbnb1eyN7h9lvgI=
Subject key identifier: A4:68:1F:4F:D8:C3:CE:AD:CC:5E:0B:39:2D:62:CF:A0:37:94:10:44
Certificate issuer: /CN=87eb8683-245d-4fd0-909a-a8de70c5dadd
Certificate serial: 010D0C9F4328584957F3FD6CCC1D888262CC1300
Authority key identifier: 9C:92:D0:4D:B3:AD:78:C2:85:03:B9:E1:DC:A7:0A:98:6C:9A:B0:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/edff4cf3-1c4e-3ee7-95fb-afdeae5d2e69.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 394522
IP address blocks: 198.163.221.0/24 maxlen: 24
198.163.222.0/23 maxlen: 23
198.163.222.0/24 maxlen: 24
198.163.223.0/24 maxlen: 24
2620:35:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:fd:6c:cc:1d:88:82:62:cc:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb8683-245d-4fd0-909a-a8de70c5dadd
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=f5847908-c96f-4486-bbb9-ffc415de0cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:7e:7c:36:33:3d:86:9b:1b:8e:48:6d:40:
8f:e9:d1:93:7b:a9:6e:3e:e1:6b:a8:96:6d:72:db:
8f:7f:51:c7:5d:64:df:df:7b:e9:a5:0f:18:17:a8:
48:d3:d3:64:95:70:c3:0c:d3:c5:da:fa:19:e3:95:
8c:94:40:82:f7:62:0b:f4:f8:8c:21:6b:95:9c:26:
0a:e0:29:1b:7a:38:0f:cf:66:35:65:23:39:f3:7e:
1e:2f:fe:1e:27:24:f0:1b:4a:ab:48:50:a1:f8:73:
a4:2b:f7:c2:80:4c:7f:ff:3f:b7:b2:92:4b:33:48:
29:dc:21:5f:9d:48:97:39:32:ce:32:30:8b:f6:05:
03:33:ec:ec:99:c1:ee:51:1e:1e:48:44:c3:c6:fb:
5f:60:22:25:9e:a9:fa:04:da:0f:76:97:55:5a:ad:
54:20:ae:9f:08:6e:f8:83:5f:ef:53:54:0b:05:c7:
75:6d:67:a4:9d:69:67:79:66:0b:d5:4f:87:ac:24:
f5:48:3d:f9:86:6d:e1:8e:5e:67:11:de:d7:7e:8e:
08:a5:bc:9c:c0:6a:63:b5:d6:34:26:6d:46:4c:93:
9f:24:19:75:f0:78:2e:91:c5:b5:6b:a6:da:1b:5c:
5f:34:66:b5:7c:12:6b:62:6c:c3:30:8f:b1:57:80:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:68:1F:4F:D8:C3:CE:AD:CC:5E:0B:39:2D:62:CF:A0:37:94:10:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/edff4cf3-1c4e-3ee7-95fb-afdeae5d2e69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.crl
X509v3 Authority Key Identifier:
keyid:9C:92:D0:4D:B3:AD:78:C2:85:03:B9:E1:DC:A7:0A:98:6C:9A:B0:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer
sbgp-ipAddrBlock: critical
IPv4:
198.163.221.0-198.163.223.255
IPv6:
2620:35:8000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:d8:43:05:67:95:ba:da:eb:d6:1e:3a:d2:96:de:d7:ba:b8:
68:e0:57:b5:49:f5:4b:14:f7:40:84:82:5c:b7:a8:a3:d4:f1:
18:f5:11:52:54:09:7f:89:08:8d:d4:c0:47:39:09:34:fb:e7:
92:bd:c7:9b:3a:d1:95:a6:4f:86:1d:26:6e:07:93:a8:52:d8:
ee:8d:c5:7a:ba:a0:6f:f4:1b:f5:9b:28:4a:77:c3:44:6b:bd:
d8:12:28:33:c1:c6:dc:da:9d:39:3a:a4:78:32:68:79:fa:4d:
89:5f:fe:ec:95:f9:d0:3b:25:6a:f5:c7:9f:99:d5:c9:26:60:
c6:7d:62:44:08:89:b2:77:af:72:e6:70:8e:b2:2b:a1:ad:67:
16:6e:bb:cc:f6:8e:77:ff:93:e2:cb:23:12:82:1d:40:ce:80:
e7:09:13:b2:f6:12:9f:71:c8:68:f9:20:03:b8:38:4e:6d:0b:
79:c2:e7:2b:c5:07:cf:d6:0e:04:44:a8:67:ed:b4:d0:a8:ad:
3f:a1:44:ed:15:fd:71:51:8c:f4:f2:2e:e4:da:d1:99:91:e7:
f7:5d:48:ad:43:77:44:c0:90:1b:3c:e9:bf:a4:c4:f7:84:a5:
f5:07:00:67:f7:8a:ee:3e:b4:ea:be:76:e3:4e:dd:58:64:47:
18:3f:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:06 2025 by rpki-client