Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d23058f-8870-3f8f-a781-e981508b0809.roa
File: 1d23058f-8870-3f8f-a781-e981508b0809.roa (raw, json)
Hash identifier: NG3UM3pHoG+PYIyy3EqFNtayieDATIPAdrwkHxZ29Qg=
Subject key identifier: 85:3F:DF:F5:A3:13:CB:09:94:FF:B3:43:96:3A:7E:E5:FD:4F:43:FC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5FEE89A0F265E153A4800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d23058f-8870-3f8f-a781-e981508b0809.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 198.235.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:fe:e8:9a:0f:26:5e:15:3a:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=b3d51ce8-e78f-491b-83de-dc35799053a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:0a:df:c2:51:57:bf:60:bd:7f:a1:b7:4f:
08:00:47:c4:b3:e5:e8:21:63:50:2a:10:86:85:52:
9c:d9:f5:a2:a4:c7:7f:cc:8c:a5:d0:18:aa:63:fd:
9a:cc:da:06:3e:cb:8e:74:b1:1f:ee:6b:ee:d1:e3:
54:74:1e:22:c2:c1:da:08:be:0d:f6:01:8f:fd:f6:
8a:5d:59:b3:8d:38:1f:8e:39:e4:96:b5:f7:42:a9:
c2:c2:03:0b:ea:32:2e:79:5c:14:6f:0d:cc:67:fa:
87:65:f4:1f:98:da:80:70:ce:8b:ca:6c:1d:fa:d5:
cb:ab:e0:cc:7a:3c:bd:70:52:93:3f:b5:3c:f1:ed:
10:a7:98:75:84:b3:62:26:26:d6:ef:90:1b:5a:59:
0c:22:52:4e:4b:f8:61:99:2a:25:62:b2:d2:43:88:
f4:04:85:b7:48:5b:a7:7a:db:12:5b:f5:9f:e5:ba:
78:30:9f:8f:38:fa:d3:6d:7a:ff:89:77:cd:25:65:
30:9d:b3:3d:fc:11:66:10:9c:c9:91:fd:d3:9c:7f:
82:c6:0e:66:dd:3a:3b:a5:25:fd:56:a8:4c:fd:56:
1b:3a:ac:1b:5e:6b:96:62:21:a5:10:d7:91:6a:78:
69:a7:a0:ab:17:da:0e:e8:23:54:38:e3:9e:aa:ba:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:DF:F5:A3:13:CB:09:94:FF:B3:43:96:3A:7E:E5:FD:4F:43:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d23058f-8870-3f8f-a781-e981508b0809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:8b:41:68:6d:bc:f2:99:75:27:ad:66:80:86:04:29:00:4f:
45:69:ad:1e:94:5a:c3:fc:04:df:77:c7:64:4f:d1:36:b6:72:
6e:73:24:72:c6:25:cd:ea:df:58:d5:2b:ff:01:5b:7c:5f:a9:
78:92:25:dd:ab:a2:09:23:7d:da:67:96:23:12:c4:22:4c:7c:
60:ad:ca:ee:72:23:72:4e:f5:0c:bd:5d:93:fe:9d:86:91:72:
53:d8:23:f0:b4:52:19:5e:3b:72:07:e4:58:f1:f7:89:4c:c3:
7d:8e:83:aa:48:c2:48:8a:7e:f7:06:ab:e7:ea:80:2a:7c:7b:
4f:11:ef:b5:18:36:79:7f:f6:6e:c9:b7:43:ef:f5:1f:bb:82:
ea:c6:52:a5:e6:e3:7f:ea:e3:c2:85:5b:28:fe:42:aa:d4:0e:
c8:cd:be:e9:c9:f6:68:08:76:c9:92:f8:11:41:03:81:99:de:
69:ff:4e:f5:04:43:e5:2e:81:1e:68:06:79:44:70:07:1c:0a:
b4:dc:7c:f6:4a:fb:a8:a6:0c:42:bb:06:bf:6c:4b:b4:50:05:
5a:35:e5:83:24:52:79:41:13:b2:a3:3a:b6:fc:fe:0c:38:67:
42:e3:fa:96:80:8b:a8:aa:78:59:7f:bf:a7:9f:5f:d3:5f:3f:
73:f6:bf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:57 2025 by rpki-client