Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa
File: 4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa (raw, json)
Hash identifier: h22cGrVJxzqmQMcQS4n34luAw6F11J9GPi8GZO/2yow=
Subject key identifier: 75:54:87:D5:90:C2:0C:7F:3D:1D:F9:EE:36:19:5E:9B:E7:A4:65:87
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858489A3B43118DA92D9BC7BACF00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398465
IP address blocks: 198.66.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:43:11:8d:a9:2d:9b:c7:ba:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=4324b72d-3ca4-4712-bbde-096cda57b41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:5a:72:57:67:9b:b4:d1:cb:d9:1e:1a:c5:
cf:4d:64:d9:08:80:ff:d2:1d:49:ed:31:c7:d3:fa:
c8:fd:1f:ad:9f:92:8b:37:4f:52:12:6c:d8:7f:0e:
29:df:68:92:05:06:2e:af:89:97:56:89:d3:e5:22:
94:14:8b:d3:d2:c6:7d:7e:92:90:6a:b6:ac:c4:ad:
ab:57:77:40:b6:74:14:5c:d5:8d:78:c8:f8:90:de:
43:27:f2:2f:64:23:c6:57:b6:59:79:11:d3:97:d6:
6c:81:8f:38:47:2c:7f:43:66:ea:0d:ab:0f:0b:1d:
e4:66:a6:fa:42:ce:38:d9:b1:1e:53:e6:ed:0d:80:
90:16:31:2e:25:1f:6d:e5:f7:38:17:48:57:d7:e2:
47:bb:73:64:e6:8f:34:3a:14:e9:7a:70:90:3f:ba:
d5:e9:0e:ef:93:68:7c:2d:ac:6f:e6:0d:1d:7e:e8:
0c:6c:11:a6:c9:a7:c2:8f:23:50:83:c1:ae:76:88:
98:21:26:b6:fe:de:a3:08:65:29:bb:68:32:c2:f4:
70:59:f3:0c:f8:1e:6c:65:8b:66:0d:50:22:df:5b:
cf:92:f0:1a:53:67:3e:48:8e:10:8b:45:57:94:2b:
32:c2:ea:27:5b:9a:b9:d2:23:a4:c3:e8:b4:e0:c0:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:87:D5:90:C2:0C:7F:3D:1D:F9:EE:36:19:5E:9B:E7:A4:65:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.66.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:ec:06:51:03:10:ac:fa:71:bc:04:12:24:eb:93:8a:3a:4c:
70:88:e6:7c:1f:51:f3:8a:c3:3e:f6:65:25:45:54:60:26:37:
8d:9b:9f:65:30:b5:8b:66:bd:a6:79:08:24:9a:26:4d:02:bc:
41:d4:fa:13:e9:6e:3c:06:df:7a:78:44:4e:f0:19:ae:6f:ae:
82:b4:9d:de:42:5d:be:b7:a2:d9:37:86:29:06:14:69:f0:88:
0e:f3:79:5b:6f:7f:6a:64:45:89:c3:9b:af:15:56:6f:41:3e:
c6:4d:eb:bc:11:ae:2f:ad:8a:4b:3a:1d:03:40:8d:1b:d8:70:
a0:17:7a:51:8e:aa:01:39:8d:60:41:f2:e2:44:e2:d6:85:71:
e3:fc:1a:06:24:4b:50:98:1c:f7:99:f1:84:3d:52:9d:ea:17:
cf:6f:24:ab:30:fe:1f:4d:31:d1:3c:58:41:99:6f:2d:e2:d5:
81:4e:a9:ca:d3:1b:7c:be:32:fa:1c:c9:2f:d7:b6:da:2d:3c:
66:05:c5:eb:2f:b0:f4:72:06:3e:9b:09:7b:8f:b7:e3:ec:3f:
73:65:58:ff:5b:06:09:d9:52:27:ba:1b:98:02:32:77:61:b9:
06:a5:20:f5:bf:20:41:6e:54:47:d1:f5:d4:73:d7:22:c6:0d:
d0:35:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:24:22 2025 by rpki-client