Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa
File: 8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa (raw, json)
Hash identifier: G0PbCxgtOa0jceU4IW5VoTodpu1K1Bv3rvhXl5jGbq4=
Subject key identifier: BE:A2:CD:0D:DA:CC:3F:87:03:A1:C4:73:52:2D:7A:19:EF:4F:E4:46
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584917DC2274610AC70CFD9E7920
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 132892
IP address blocks: 198.41.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:22:74:61:0a:c7:0c:fd:9e:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=91da84b3-7c5a-4edf-b13b-e91b92c5bd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:33:8b:70:de:20:64:6c:13:b1:42:da:7a:
86:98:2e:0f:79:bf:6f:8d:94:16:0d:70:47:cb:54:
f3:ad:6f:0a:d6:31:09:35:3c:bd:b9:9f:db:80:be:
0f:d1:59:69:b0:26:cb:54:a9:b1:2d:fc:5b:57:bd:
14:cd:16:0a:cc:5a:f4:ab:37:08:9a:02:7c:7f:4a:
68:6d:30:77:7a:3e:cd:f6:e6:7c:7f:16:95:2c:ad:
75:55:77:80:fb:0d:23:f3:ee:f4:68:03:b7:17:b4:
0f:44:7c:e0:97:4c:a7:a8:eb:8e:a2:58:0a:8b:1c:
43:da:cd:99:0c:bd:fc:dd:73:b5:de:d3:fe:6f:b3:
20:31:66:f7:96:53:35:29:26:bc:11:09:76:02:20:
c1:d9:be:eb:9a:0e:fa:07:a9:69:12:fa:5d:de:ff:
9c:44:31:bd:47:c9:da:ba:55:47:d4:fc:03:6b:f2:
82:42:2b:be:ac:3c:7c:4e:54:cd:41:f8:f8:92:78:
67:04:f4:56:6f:c8:45:59:8c:67:eb:e9:bc:b0:20:
ef:2d:34:e6:ac:82:33:be:0c:8c:bd:78:57:26:28:
8d:12:76:49:77:92:d6:97:dd:92:98:b0:01:74:7d:
b6:3f:43:ec:84:12:3c:fa:0c:c5:27:fc:59:c3:2c:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:CD:0D:DA:CC:3F:87:03:A1:C4:73:52:2D:7A:19:EF:4F:E4:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:eb:ee:7d:a9:1b:db:44:be:b2:74:57:be:91:0b:6b:55:f3:
7b:35:90:ca:d2:ae:9c:5b:fd:b3:80:54:e2:f0:30:53:cd:eb:
dd:4a:82:8f:8f:c2:60:df:b1:6f:f2:1d:45:d3:46:ce:53:94:
b2:0a:94:e1:f0:f3:7e:35:27:fe:38:48:3f:ad:4b:0e:4b:ac:
a7:76:78:f1:91:a3:ab:b0:10:cb:8f:c2:0e:46:96:7a:a6:da:
60:42:43:61:ec:c9:f2:42:a2:be:b3:96:97:f5:d2:96:a3:7b:
f8:f6:54:dc:0b:25:64:ef:0b:5e:b2:f5:57:91:1e:79:d2:f7:
0f:ea:9c:61:4a:c8:36:5c:ca:85:03:a4:15:70:77:4e:ff:9b:
8b:18:a3:d9:b5:7e:8b:97:01:77:2e:27:ab:e0:a5:53:0d:18:
36:de:ef:58:e9:b8:f5:d9:7f:22:42:f2:b8:ac:5e:09:ce:3a:
8f:0b:7c:f2:d3:b6:56:8d:91:3b:04:27:b9:e1:5f:6c:72:d7:
e3:05:86:70:62:42:58:5c:c2:fa:70:2a:cb:37:04:0d:92:42:
39:22:af:be:16:b3:1f:a5:ab:f0:3e:6f:f7:d3:f6:ae:c4:11:
49:56:72:d1:6d:26:9d:b9:6a:9d:99:a5:52:cd:71:de:c9:bb:
fe:c9:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:14 2025 by rpki-client