Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa
File: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (raw, json)
Hash identifier: pDUbbWdeol/etsC/BFFPZiMwC4HNz5bob7chRP4Pfug=
Subject key identifier: 91:1A:75:08:01:C9:44:74:C8:15:40:84:E5:FE:16:22:6F:30:49:D9
Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1
Certificate serial: 010D0C9F4328584950F9640C9CE58B917A676C80
Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 54013
IP address blocks: 198.231.26.0/24 maxlen: 24
198.231.27.0/24 maxlen: 24
204.75.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:64:0c:9c:e5:8b:91:7a:67:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=d03e4d73-26b4-4e49-aa03-76c2842c8807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:86:f0:ce:7b:7d:85:63:7b:8b:a4:85:74:
f9:3d:ec:12:41:dc:f9:92:2d:d7:92:81:24:9d:e4:
ab:7b:68:7a:19:ee:6c:c1:ff:d7:03:a0:de:93:7b:
52:c4:1a:34:4c:f8:20:b7:58:10:ff:e5:c6:b2:c7:
4e:1d:1e:89:cc:87:0c:07:c4:0c:eb:e9:92:64:e5:
bf:02:34:a7:4b:a2:5a:c3:a4:b0:37:ad:67:55:9e:
dd:c2:32:b8:1a:ae:e9:b4:a3:c6:80:41:8f:83:23:
07:d5:3f:6e:e9:6d:82:5b:24:09:59:bb:04:9e:4e:
a6:46:9b:33:3b:00:fb:d1:69:fc:af:4c:60:5b:b7:
b4:59:20:a8:3b:61:76:86:3c:0f:1d:fd:ff:de:45:
f3:56:8d:1e:58:1d:1b:e2:1c:e0:24:b5:8e:41:dd:
0f:5e:c2:d9:41:74:bb:e2:c6:63:14:31:76:92:d4:
e5:7a:41:03:f9:71:6e:51:0d:ec:e1:d1:85:57:b5:
a4:20:8f:cf:d8:b4:02:e7:ad:c3:05:55:4b:fe:4a:
1b:00:5e:11:dd:a5:11:83:15:6d:55:48:49:c4:98:
04:de:73:dc:13:32:1a:ea:54:5c:1e:14:38:90:59:
19:02:6a:cf:90:af:09:f5:ee:1b:af:5e:5b:d5:74:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1A:75:08:01:C9:44:74:C8:15:40:84:E5:FE:16:22:6F:30:49:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl
X509v3 Authority Key Identifier:
keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer
sbgp-ipAddrBlock: critical
IPv4:
198.231.26.0/23
204.75.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:6f:c1:f5:ab:2f:82:f3:81:d2:08:a3:1a:19:97:db:e3:84:
01:02:17:54:bf:f9:ef:10:d8:2c:99:75:3e:f1:26:06:0c:ff:
4c:15:cf:3b:a4:00:a2:b1:22:fa:8b:a1:2c:a9:fb:2f:a7:c2:
f1:d7:5b:05:33:4e:b2:b6:a0:6f:cb:70:b0:39:09:13:9d:b4:
52:d1:7d:42:9d:c8:b4:86:a5:13:ab:17:ad:67:1a:25:73:67:
4b:71:36:00:9a:47:1d:04:cf:96:14:53:0c:d7:2e:2d:b1:55:
1a:dd:58:5e:c4:05:a5:00:57:f1:28:16:91:dd:57:b8:3e:71:
35:81:a3:76:7d:41:02:ef:f4:98:c7:5f:89:54:4e:1d:e3:5e:
2e:91:44:87:6b:05:ce:a7:b4:88:76:40:09:44:3a:7f:2c:07:
c8:ca:e5:80:f8:39:a9:5a:43:cf:13:0d:64:c8:1e:d8:a5:cb:
f9:6e:d5:a2:8e:cc:c1:97:0c:82:ee:e8:5c:79:c5:b8:40:35:
24:3f:f7:e8:ea:fd:44:5c:98:64:cb:c1:eb:4b:84:5c:c9:5c:
47:37:8a:06:26:b3:65:ff:18:99:08:82:fd:f5:37:4c:c5:2d:
57:02:63:26:ba:97:ed:84:7d:0a:8f:cc:d1:7c:37:da:ae:fa:
ee:e8:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:59 2025 by rpki-client