Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f0b768bf-5029-3a0c-b94c-eebc77442ace.roa
File: f0b768bf-5029-3a0c-b94c-eebc77442ace.roa (raw, json)
Hash identifier: oUSuHGKAACEgkWPtCmCpJ33vbBczxhTuLdVhH8L2z4E=
Subject key identifier: FC:CE:A7:A1:53:E7:25:9C:72:71:45:F2:65:15:4E:F2:DA:89:E2:AD
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328576D51CC73C042CFC16F8B0F44E4
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f0b768bf-5029-3a0c-b94c-eebc77442ace.roa
Signing time: Thu 09 Jan 2020 16:07:11 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 2914
IP address blocks: 198.58.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:8b:0f:44:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=0feea536-c556-4e72-b343-29b91b90699f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:bd:db:95:57:03:b2:62:f4:78:44:f8:84:
fc:f8:92:a4:7c:19:1d:91:ce:8e:c2:87:98:e8:52:
eb:9c:50:2d:a2:70:09:62:8c:10:0f:10:8f:42:28:
f7:0b:46:cf:55:b6:df:f8:b4:c6:4d:70:28:ca:50:
db:7e:aa:b7:9b:ee:b9:6f:8b:10:de:ce:b2:ac:4d:
7f:ef:18:11:fa:06:71:47:c9:53:97:90:3d:2a:1a:
d8:3c:57:14:96:03:78:58:83:40:dc:f0:6b:2b:bc:
89:e7:23:2e:5e:15:b3:ce:e6:c3:c3:d1:16:7b:a4:
a7:33:37:1f:c6:46:14:04:65:6c:fe:fa:ae:e8:e0:
4d:9d:ea:92:53:52:9a:5d:70:9d:03:28:d8:c8:c8:
d4:e2:ef:de:f3:7f:a5:b3:a2:10:08:d9:69:c4:12:
b5:3b:52:5f:96:0b:78:af:8f:4a:48:69:28:42:cb:
33:1b:ff:5b:7d:f9:34:e4:c5:d8:fb:9e:3c:85:d4:
f0:ad:c5:ed:ff:63:ba:da:83:6c:da:11:1a:97:93:
36:60:64:8d:30:0e:b4:7e:b2:36:3b:0b:04:8d:09:
5e:5a:4c:e8:38:2f:9e:37:79:2a:15:ad:47:08:40:
83:4a:6c:62:d4:dd:df:ba:0b:80:80:11:a2:d8:a0:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CE:A7:A1:53:E7:25:9C:72:71:45:F2:65:15:4E:F2:DA:89:E2:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f0b768bf-5029-3a0c-b94c-eebc77442ace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.58.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:74:b4:37:ac:54:9a:95:51:bb:7b:e0:f4:ef:ef:a1:81:37:
6d:e2:76:3f:5b:45:3a:6c:90:79:91:22:be:5c:50:02:f1:10:
76:6d:78:7f:19:dd:51:60:cf:6d:6c:23:5b:6a:18:db:ca:46:
1e:22:2e:e6:8a:c9:22:ef:4f:77:6e:5f:ff:6b:89:82:98:92:
7e:48:0f:0b:cc:fd:af:a5:15:83:a3:bd:f8:fc:d1:9e:83:1f:
56:2f:6e:bc:69:6a:7b:e5:33:85:70:43:31:6d:9a:f3:58:b7:
07:93:98:72:a7:22:64:0a:99:d1:81:ec:f4:ae:f8:7c:42:d3:
74:c7:ae:02:c7:4e:14:5a:53:d4:16:d7:f2:41:c1:10:8f:f6:
65:fe:be:4c:a0:6e:a5:77:d1:c5:2e:44:8f:78:ae:02:03:21:
4b:2f:df:4e:35:13:37:bb:9d:0c:2f:94:2c:b2:25:5f:8b:e4:
cc:0f:0f:22:80:5d:51:1a:a3:ec:db:91:4e:75:1f:08:7a:fb:
16:35:23:1b:b8:45:0b:f7:44:3f:e2:73:48:d3:b7:86:7f:ef:
80:7b:ae:03:a7:f8:a9:e0:97:08:aa:e6:b2:ed:0e:06:f5:50:
be:20:66:66:95:a0:20:e0:56:18:dd:58:c9:eb:4b:ef:8c:79:
e7:da:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:42:13 2025 by rpki-client