Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23a76e3f-a4cc-330b-9b10-a85b3f34342c.roa
File: 23a76e3f-a4cc-330b-9b10-a85b3f34342c.roa (raw, json)
Hash identifier: bjxNEik0omzPOGyLJ+6SeDhdElREKm2STt261DOqalE=
Subject key identifier: CE:21:AD:B8:D3:93:E2:5A:D2:3A:86:3A:09:EB:5F:E2:F4:B0:78:A0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5F7C043FB8D836B6ED060
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23a76e3f-a4cc-330b-9b10-a85b3f34342c.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 7122
IP address blocks: 198.163.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:f7:c0:43:fb:8d:83:6b:6e:d0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=168e3d26-59c2-440c-95f2-88d905fcfe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:37:98:d3:86:b0:a4:15:9e:ac:4b:9f:11:
fb:cf:6c:a1:1e:ef:d0:14:45:cf:85:25:d8:56:a2:
b2:44:97:a9:71:22:12:d5:52:06:0f:e2:6e:a1:3f:
7e:f5:e9:4a:bb:93:b2:2b:e9:61:e4:28:6e:b5:0b:
d2:bd:f1:8a:5c:41:0e:9a:0c:a4:7a:9c:cc:5a:29:
41:70:41:c8:fc:13:89:43:31:8b:0b:95:25:7a:b2:
aa:c4:af:a9:1e:fe:38:35:9c:31:08:ab:eb:86:37:
d9:3a:7f:e1:4e:64:1c:d3:43:2f:f0:14:8a:f3:0c:
95:bb:f0:1f:97:cb:92:7f:c1:a7:a6:79:11:e8:93:
91:26:72:d0:d8:45:7a:47:b7:90:77:90:b4:42:08:
3c:06:35:41:e6:11:62:38:7e:6b:da:61:e2:79:a5:
e4:cf:bd:0c:13:4e:cb:04:31:82:df:81:9c:d7:1e:
b1:63:79:53:55:29:17:12:64:e9:20:69:b0:fb:ea:
a5:f2:cc:a5:37:fe:9c:0a:55:be:7a:c9:d1:27:e4:
b4:f7:61:e3:c0:cd:9c:27:ed:eb:b2:1a:81:ef:b0:
d7:9a:56:27:dd:89:7d:ea:07:ef:4c:aa:c5:b3:e9:
b1:98:93:29:a6:5d:b5:4b:b0:14:7d:ce:2a:f4:e5:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:21:AD:B8:D3:93:E2:5A:D2:3A:86:3A:09:EB:5F:E2:F4:B0:78:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23a76e3f-a4cc-330b-9b10-a85b3f34342c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.163.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:9e:ad:18:e9:64:bd:3b:db:8b:8f:23:7a:81:8e:64:e4:6f:
e4:63:54:d1:4d:84:80:38:8d:83:83:b8:60:ab:de:63:b4:1a:
39:e4:2b:a3:0a:e0:23:fa:c4:a7:bc:a3:ff:7f:9e:48:22:41:
59:0d:f4:98:34:02:b6:fd:35:ee:2d:e1:45:3a:95:2a:a0:83:
b6:20:e6:32:d1:7d:a7:b8:e2:80:2e:16:68:4c:dd:0c:df:3a:
c0:6d:23:26:77:aa:3d:63:49:c8:9d:76:16:da:49:ec:9c:fe:
3b:b4:0d:71:c4:f3:6b:6c:8d:b7:8f:96:a3:55:ed:3a:e4:23:
33:07:ca:16:0e:c1:00:e8:9e:49:54:73:d5:e7:76:ac:a4:f5:
2a:f4:bc:22:84:50:be:bd:16:bb:3f:6f:c7:bc:95:7e:62:43:
a9:6a:c9:84:f1:3c:c3:a8:62:98:e2:34:84:85:4b:27:64:09:
64:73:fb:df:33:58:a1:d6:49:97:a5:f6:61:92:d7:a0:86:12:
e3:54:0f:df:ff:96:ab:b8:a8:5b:9d:b5:76:6e:ae:ea:58:72:
40:35:0e:23:6b:ac:64:a8:97:a9:44:85:3c:77:7f:ed:ba:87:
33:88:2c:cb:5c:98:e2:8d:1e:4d:0b:5f:09:ac:e1:64:59:7c:
fc:1d:ef:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:17 2025 by rpki-client