Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/13ee133f-dc62-3b68-8b17-8b97746c86e8.roa
File: 13ee133f-dc62-3b68-8b17-8b97746c86e8.roa (raw, json)
Hash identifier: YxMVLEQUPRXzKR7iCCYkxss9Puhh2TSctzk61jM//EU=
Subject key identifier: DD:89:41:19:4B:DB:69:AB:D7:5D:EA:F3:16:3E:83:1B:16:99:F2:85
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F432858488DAB4DBB5BF3E404E2F08C00
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/13ee133f-dc62-3b68-8b17-8b97746c86e8.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 400754
IP address blocks: 198.71.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4d:bb:5b:f3:e4:04:e2:f0:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=75da9f97-7249-45fa-8af7-00448baa9dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:19:d4:57:8a:b0:27:d1:fc:26:87:ca:a7:2a:
f4:98:e1:ce:8f:5a:4b:2f:84:16:e1:89:26:a5:98:
86:ae:9b:f8:29:4e:74:86:a5:e9:df:95:4a:34:f0:
55:94:15:e1:87:ec:40:41:86:b9:d5:76:09:b1:ed:
49:80:a4:bc:45:6a:da:54:68:b0:9f:8d:7a:29:da:
f8:35:ce:ce:39:72:ad:1a:e4:15:ca:90:97:ef:5b:
56:7b:d5:52:2d:00:f5:d7:cf:c4:d6:c6:e0:a4:ad:
5b:b8:07:4b:8b:e9:aa:a3:2d:a7:68:83:12:30:80:
7c:19:a2:ba:7b:29:3d:b6:94:e7:81:c0:99:90:ce:
14:62:69:6d:dc:f2:a4:36:ef:99:bd:36:ba:5b:f3:
cb:68:b8:f5:f2:c7:52:fa:46:f1:34:77:83:d2:54:
f6:e0:81:3a:1e:e8:a9:e7:57:e3:d4:12:e5:d5:5c:
24:dd:a3:aa:a2:ff:61:ef:8b:96:69:4a:3e:f5:75:
63:94:16:2b:73:d1:46:bb:7f:d9:dd:5a:70:25:47:
2d:8d:77:46:47:19:e4:c2:81:a5:35:a1:d9:14:72:
c3:dc:b3:47:1c:25:91:95:cd:6c:5d:b8:30:90:2c:
4d:69:79:60:55:2a:00:aa:d3:e7:01:08:7a:cc:ba:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:89:41:19:4B:DB:69:AB:D7:5D:EA:F3:16:3E:83:1B:16:99:F2:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/13ee133f-dc62-3b68-8b17-8b97746c86e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.71.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:8a:5e:29:60:7b:19:c6:f9:a3:dc:7f:61:33:90:c8:15:e1:
a9:b7:94:db:3a:25:95:27:53:f9:40:9c:ea:35:91:03:4b:12:
24:34:97:32:72:98:5f:00:0b:c4:68:5f:9e:34:59:4d:94:a8:
b7:cc:69:f5:90:1a:19:3d:6e:3e:3c:f7:3f:43:fd:56:d7:33:
05:1d:e2:5d:5a:26:7b:79:2a:7e:64:8a:7b:3c:bd:b4:ba:82:
36:ed:76:e3:f4:c6:dc:19:c9:0b:62:e8:32:76:ec:6f:eb:ea:
f2:23:15:45:87:6e:fb:72:1d:c2:7a:bc:ae:14:a5:9e:ab:7e:
03:9d:61:0f:5e:2b:88:49:b2:bd:34:90:f9:8a:43:ea:9f:bf:
33:52:7e:49:3f:6d:9c:db:75:0b:04:06:63:f9:0a:d6:1d:a1:
8a:ba:d6:a0:73:58:c2:30:87:e7:fc:74:b9:c9:8c:8e:b5:bb:
6a:10:fc:4c:1b:e4:13:ec:ee:09:a8:86:2e:b2:52:64:16:68:
33:37:5f:f1:9f:22:a4:e2:fa:a3:93:4b:06:44:c6:35:52:5c:
5b:15:19:53:03:95:0d:7d:26:17:8e:c3:03:8d:0b:dc:e1:44:
45:3e:13:75:df:bb:1c:9c:61:8d:cf:a1:f6:22:fc:c3:e7:d7:
73:55:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:37 2025 by rpki-client