Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/885a5b4b-aecf-3710-91a0-de613d2bf35b.roa
File: 885a5b4b-aecf-3710-91a0-de613d2bf35b.roa (raw, json)
Hash identifier: jGO0UOxvR5muT5HaOr0KenvV9sVVXk2RDqjhiL1GKWw=
Subject key identifier: 61:40:C6:6A:3D:53:A0:D1:33:31:25:C4:D9:05:D6:03:E3:11:13:17
Certificate issuer: /CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Certificate serial: 010D0C9F43285848002B9F2DA358523F17AF6A80
Authority key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/885a5b4b-aecf-3710-91a0-de613d2bf35b.roa
Signing time: Mon 25 Nov 2024 21:34:47 +0000
ROA not before: Mon 25 Nov 2024 21:34:47 +0000
ROA not after: Sun 23 Feb 2025 21:34:47 +0000
asID: 8075
IP address blocks: 198.35.23.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:2b:9f:2d:a3:58:52:3f:17:af:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Validity
Not Before: Nov 25 21:34:47 2024 GMT
Not After : Feb 23 21:34:47 2025 GMT
Subject: CN=81700038-8f42-4474-9db8-73b929f09c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:3d:85:69:15:2f:42:40:ef:3e:aa:ef:3c:
aa:c8:46:57:31:aa:76:9a:8a:3e:56:cb:35:f2:17:
2b:e1:44:12:3d:c1:55:4b:97:4d:66:1e:3c:b6:e2:
70:f6:a6:f7:13:2c:82:d6:f1:cb:2e:d8:3b:2a:b0:
b9:4e:cb:a5:29:5e:12:6a:0c:0d:d5:2b:f7:a6:4c:
a1:f2:f7:3a:f8:5c:46:3d:7c:f4:e5:da:61:88:40:
b3:37:ad:49:58:30:5e:62:92:4f:19:91:e5:7b:b7:
fe:a6:41:ae:db:3a:37:13:43:5f:c2:cd:f0:0e:83:
ff:aa:8e:62:e5:34:8e:7d:f0:45:bb:49:de:fe:0c:
cc:60:96:52:68:5e:f5:e1:f0:2f:8c:84:54:9e:96:
7c:0f:28:fc:72:bd:26:0e:0b:0b:4d:b3:fb:5d:e6:
94:ce:3d:b1:e7:3c:4a:f1:66:58:8e:48:d8:0f:a6:
16:55:a3:99:65:75:c9:a8:f2:2e:b4:c5:26:d2:bf:
04:00:00:67:75:cc:b3:6e:d6:13:ee:3a:c1:21:2e:
64:f7:3f:ff:93:92:e3:72:f5:fe:c4:0c:d2:53:20:
1a:ee:92:3e:79:16:92:47:94:50:24:c9:d3:af:c4:
68:89:09:a9:f3:33:8d:47:d4:4a:be:f4:05:3b:57:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:40:C6:6A:3D:53:A0:D1:33:31:25:C4:D9:05:D6:03:E3:11:13:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/885a5b4b-aecf-3710-91a0-de613d2bf35b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl
X509v3 Authority Key Identifier:
keyid:9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.35.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:bb:95:b4:f8:4a:1c:35:68:b1:3c:85:1e:c5:88:a7:55:ff:
5a:20:e7:9a:32:52:b1:f8:29:fb:32:07:34:21:f7:ff:a2:c7:
5f:54:9a:df:0b:9f:5f:91:d5:b5:c1:59:b6:64:1e:71:3c:5e:
1d:d2:1c:41:8e:df:55:af:b9:fe:15:61:7b:c2:13:40:39:6f:
8d:97:80:36:40:a1:8b:8f:29:97:c7:ad:af:f8:1b:31:a9:a5:
d6:35:e4:57:5b:4d:5a:16:1b:4e:e2:ca:6c:33:92:4d:6c:f1:
9f:71:da:7a:88:da:3b:a4:dc:40:88:88:4e:95:68:90:de:cb:
ec:26:94:67:e0:75:a6:7e:65:8a:82:8f:37:4b:cd:dd:6d:03:
8e:7d:9f:e9:11:ea:71:78:9b:53:98:3c:7f:65:f3:08:ab:12:
92:6a:e8:04:82:ea:be:02:c9:3b:4c:0a:8f:96:70:28:6d:de:
ca:d9:36:7e:b9:0b:77:e1:25:bb:fa:4c:38:39:fa:cf:c9:5d:
10:d6:4d:64:3d:a8:6c:ae:85:10:17:fa:d5:23:e6:b7:54:d3:
88:e6:9a:2e:bd:50:30:f6:ec:7d:19:92:e1:9a:0b:a7:1f:4b:
17:c3:55:6e:0f:e7:83:aa:f7:49:33:2f:be:c3:9e:c1:65:4e:
e2:a3:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:31 2025 by rpki-client