Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa
File: ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa (raw, json)
Hash identifier: zgjy+LkloaSz0jNLjECLutibPkkCshs3tvDP107eq+c=
Subject key identifier: 8E:98:F9:A6:DA:C0:64:5A:C0:72:41:4E:1B:9F:8E:B9:B1:DC:A3:D8
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F43285848E2D108399E53B734D2B72C00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 1403
IP address blocks: 198.16.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:08:39:9e:53:b7:34:d2:b7:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=a5f837f3-6124-413e-bb8c-bf682d52f304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:24:d8:7e:a2:f0:bb:65:10:50:1d:d2:bd:
8f:75:9b:20:12:71:41:05:09:24:70:6a:4c:ff:69:
d0:1a:2b:2f:49:23:18:11:8c:a2:b1:b2:7e:4f:e3:
5a:bb:f7:01:dc:e7:03:f9:75:c0:0d:bc:6d:01:ce:
9f:9d:5b:e9:5e:b4:8e:f5:90:34:8c:bb:79:5b:aa:
eb:ab:a9:da:a2:fb:b0:47:af:bb:1e:7e:2b:a9:2b:
13:80:27:6f:00:ec:af:91:67:d4:45:5f:de:fc:60:
65:f5:a6:b6:ad:8d:03:f1:f4:6c:56:df:69:bf:d2:
7f:5d:db:b2:4d:13:27:54:ba:56:45:74:7f:cd:af:
46:ea:d6:d2:9c:99:dd:51:6f:63:eb:8a:a7:95:f0:
f1:3f:5d:e0:63:e1:d4:3a:f2:41:76:b0:7b:bb:68:
8b:9c:8d:24:39:5c:94:80:66:95:6c:d9:d3:ed:28:
56:5f:59:ff:f8:0d:8e:28:06:ed:3e:b0:2a:55:c2:
9a:25:f4:7b:dc:89:2d:90:18:02:39:97:ed:17:c2:
08:95:2c:d2:2f:d8:dc:c0:d2:c2:16:5d:66:ee:a7:
d0:0c:cb:76:05:08:1a:ec:a2:70:ee:1e:27:ab:80:
89:cf:b9:1b:de:a8:79:e2:4a:49:d0:82:6a:3b:06:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:F9:A6:DA:C0:64:5A:C0:72:41:4E:1B:9F:8E:B9:B1:DC:A3:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv4:
198.16.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:a0:71:33:fd:17:6b:2d:a3:a2:5c:35:b6:25:0f:cc:b5:e8:
80:5f:d2:c1:83:9c:43:55:c5:81:d3:34:c5:76:45:b8:29:07:
0b:a1:19:55:e5:a5:ab:89:c6:66:1a:bd:55:8c:c1:25:fb:7a:
dd:d2:0e:d6:32:4d:26:80:f7:7d:16:9c:f5:12:2c:f6:d9:2a:
44:70:22:43:10:c1:a8:e8:fb:21:7f:e6:ab:75:a3:82:65:d7:
1b:d2:7c:b8:e0:a4:d7:ea:ff:a8:c8:64:a2:7a:e7:98:b7:de:
87:9d:74:bc:3f:59:f6:26:c4:6d:07:46:ee:c8:07:d4:3d:ca:
c7:9b:73:bd:d3:4d:85:49:32:5d:40:dd:ae:33:f0:ab:5d:0a:
49:c3:be:93:11:1e:34:b0:61:48:71:c2:30:11:d0:26:39:4e:
0c:22:48:e6:ff:bb:c2:08:dc:63:23:1f:1b:44:6f:38:71:07:
44:d3:b9:69:e4:31:c4:2d:39:f6:82:54:a6:7c:e2:32:b8:81:
94:59:71:2a:95:7d:ad:68:cb:f5:35:71:80:ab:c8:99:3e:57:
01:8d:ea:2f:cd:25:89:3e:2d:9c:cd:b4:e3:59:25:f3:9f:df:
91:92:e2:d1:96:9b:0d:01:7d:36:fa:97:c7:f5:f4:7e:77:53:
22:a5:5b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:13 2025 by rpki-client