Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0ecd999c-b3bd-305a-9ada-94796d39181f.roa
File: 0ecd999c-b3bd-305a-9ada-94796d39181f.roa (raw, json)
Hash identifier: GBV9b5pMCu/9mC54+vok8Qoq906SW573ipTLGPk5vwQ=
Subject key identifier: AB:BC:FD:B8:1D:16:38:AA:2B:7D:1A:2A:56:E5:20:7F:F0:0D:98:EF
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F432858487A20784A3E4F949DDBB1B400
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0ecd999c-b3bd-305a-9ada-94796d39181f.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 177
IP address blocks: 198.111.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:78:4a:3e:4f:94:9d:db:b1:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=f9e4e75e-870e-4ea9-bf87-2f388b662649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:9d:93:4b:74:12:a8:e4:1c:24:ef:d8:71:
6d:da:a6:86:f5:26:f1:c1:07:5a:8d:a5:7e:1b:54:
70:55:7b:9d:09:41:bb:4c:c0:65:2f:9d:95:d2:b7:
7d:92:c2:15:d0:58:ea:0c:f2:97:2d:0b:d1:3c:90:
48:61:24:f1:c3:a3:c6:6d:ce:17:e7:03:d7:cc:4a:
09:95:9f:0b:d5:f4:9c:ae:b3:54:82:8e:b7:22:22:
56:48:9c:56:28:35:6e:fd:75:61:69:e1:1d:f7:9e:
9e:5a:61:5d:ed:1d:7a:53:1b:8c:e5:09:93:b6:d8:
fa:3f:ce:6b:32:63:dd:0d:52:28:93:d0:aa:6e:47:
b1:8d:26:f4:fb:fd:25:82:5b:00:b7:64:b4:15:63:
70:6e:a6:67:c6:06:f8:07:56:c1:01:c6:2d:14:7f:
06:ea:f6:48:2b:f7:2b:ca:41:75:33:4f:48:61:5f:
ea:b2:25:5f:e3:c9:94:17:e9:d6:5b:21:de:01:37:
a8:02:e8:db:68:71:f3:ea:ec:52:69:bf:8a:69:83:
6b:f4:d4:51:0b:cb:21:8f:83:65:d3:8c:be:c1:1e:
6d:ea:02:11:8c:34:0f:86:23:80:61:78:cf:c4:99:
cf:fa:c6:af:31:3c:48:c1:74:00:ef:fb:21:87:0f:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BC:FD:B8:1D:16:38:AA:2B:7D:1A:2A:56:E5:20:7F:F0:0D:98:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0ecd999c-b3bd-305a-9ada-94796d39181f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
198.111.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:5c:eb:3b:23:fe:f3:f6:1a:d1:ee:3d:85:62:ec:2e:23:40:
4e:6c:67:24:39:6a:93:f1:a1:8a:8a:f9:c8:4d:48:88:87:7a:
1c:de:ae:dd:fd:b1:99:2c:4f:5f:4f:45:7a:e8:19:dc:8e:e9:
87:cb:3e:ab:f1:6d:d8:65:ab:79:9f:78:4a:4c:ca:e2:32:36:
58:00:e9:08:c4:0a:f9:ad:2c:06:8d:f9:d1:09:14:80:de:91:
97:ee:97:ff:85:8f:fc:20:c0:f4:63:cb:ec:04:5f:48:5e:9a:
c4:77:30:80:a8:e0:28:c8:a7:31:c3:6c:56:e7:37:15:42:bc:
2a:84:dc:e1:4b:4d:23:dc:e3:8e:c3:0d:78:4a:e6:7a:8f:fc:
c8:f0:d5:eb:a9:fe:ec:81:be:ae:0e:06:3d:f6:eb:4b:be:b8:
e3:4a:da:af:7b:51:af:f4:b3:8a:f1:78:0c:56:ef:0c:d9:82:
a7:50:af:87:50:aa:bf:d3:6d:49:ed:c7:f1:20:de:f2:b2:91:
0b:68:69:cc:3f:16:ca:4b:78:01:5f:6a:12:20:7b:ac:76:0c:
ca:7e:78:30:2f:3f:1a:dc:b0:45:e9:19:26:2b:7e:0b:7b:ce:
3e:e0:83:55:fc:dc:1a:6a:f8:80:c0:1a:99:4e:df:8a:13:ba:
85:31:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:44 2025 by rpki-client