Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0329ca24-543b-3e14-bff3-7ef70cd0936e.roa
File: 0329ca24-543b-3e14-bff3-7ef70cd0936e.roa (raw, json)
Hash identifier: zzif3V3RSwN5ZVDTo2Q2B+bhDYJlFLBO+jF3Ka8/X6o=
Subject key identifier: 53:AA:A0:80:78:12:7F:3F:33:5B:35:25:F7:70:37:FD:B0:47:7F:1D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E178284FF5CD1390112580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0329ca24-543b-3e14-bff3-7ef70cd0936e.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 198.41.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:78:28:4f:f5:cd:13:90:11:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=ea91b302-7782-49fe-910c-1e78d4c2c1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:54:e8:b8:9d:93:40:7a:ad:c8:48:19:d4:
9b:b0:c9:da:e9:d6:25:4f:69:0c:4f:ff:72:0b:e6:
e7:90:df:d0:0a:37:22:89:37:70:93:19:18:94:36:
01:fd:9a:2c:cf:95:8b:cf:5f:8c:ad:4d:bd:7d:0e:
67:47:a3:18:3a:78:8d:3e:46:f8:c2:40:12:6e:f7:
b9:7b:ad:5b:83:9a:a6:4b:2a:9e:9b:27:45:eb:0c:
a6:50:59:3c:3f:f7:a4:8b:f0:42:94:6e:ed:10:bc:
4b:53:19:2e:b9:80:6d:25:6f:de:4f:88:c0:5d:58:
9e:41:bd:d9:a0:0a:43:5d:06:26:ef:d7:ce:d4:5b:
43:a7:3e:f5:38:b9:bf:65:30:82:55:90:63:13:db:
63:d5:75:3f:30:82:01:12:81:7a:87:94:4f:f0:82:
bf:62:41:ad:27:43:36:d3:93:26:84:43:9d:d7:04:
39:ea:40:fe:29:b3:da:44:e8:89:cb:19:c2:2b:a2:
2e:94:86:98:e9:27:b9:41:08:8d:6f:a0:70:5f:3f:
c4:19:b9:0e:da:a2:df:a1:b3:03:ee:91:67:94:8f:
2e:ca:e1:fb:f8:9c:de:ed:03:2b:22:4a:cd:4d:5d:
6b:98:8c:99:6a:57:de:89:6f:23:83:a0:82:a8:98:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AA:A0:80:78:12:7F:3F:33:5B:35:25:F7:70:37:FD:B0:47:7F:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0329ca24-543b-3e14-bff3-7ef70cd0936e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:04:8f:10:da:fe:36:fc:bc:dd:9f:55:24:ce:0f:96:5e:4d:
03:96:0c:e4:a9:99:cf:bb:13:50:3d:f2:ff:dc:6f:a6:9d:71:
54:11:33:0f:fe:0f:f5:06:de:67:55:11:9c:8d:61:64:37:5c:
4b:b1:a2:1a:69:d6:a9:1c:1e:dc:87:83:6d:b4:47:9d:31:3c:
ab:31:74:bb:9c:a5:b8:af:89:8d:bf:e2:8b:f9:8f:fc:4d:96:
6e:1b:fc:f3:16:4a:4a:c7:25:73:26:13:45:9e:fc:08:39:b3:
1c:fa:ad:ec:f0:cf:2d:09:e2:11:70:a6:9b:82:32:03:ab:9f:
5f:40:bf:e5:9f:41:56:58:78:b5:60:cd:6f:68:f6:e9:04:70:
84:50:8a:45:69:ae:24:21:59:a8:d9:f1:db:e8:eb:b8:11:f1:
5b:51:49:b1:fa:86:4b:56:2c:da:5d:70:a9:e5:e6:7e:be:9f:
12:39:fa:47:f9:30:55:a7:9a:ef:9f:8c:e1:57:f9:70:de:37:
14:58:48:0e:9c:4b:b9:4d:a7:a9:97:0f:4f:dc:44:14:e3:ff:
ec:7d:18:a6:e8:35:ec:c2:f9:d6:76:44:9c:da:ac:3a:ab:41:
e7:f7:29:ce:71:0f:06:c8:bf:07:ed:c6:37:71:f0:a9:03:21:
06:5b:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:00 2025 by rpki-client