Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/94f98b1f-5228-3388-9822-6ef85db08a21.roa
File: 94f98b1f-5228-3388-9822-6ef85db08a21.roa (raw, json)
Hash identifier: ctmasQNIsBbXRhr9/QUZncpIshSRCNCHqEcQDegscZs=
Subject key identifier: 48:1D:C6:04:A0:65:02:B2:39:94:CE:65:9E:D0:20:AC:64:30:1D:34
Certificate issuer: /CN=4190a890-d7ce-4ea4-a558-53090be01bab
Certificate serial: 010D0C9F432858483885574068AD9568881432C0
Authority key identifier: AA:A8:98:B8:A7:9B:46:D4:9B:4E:1D:A2:5B:03:C8:B4:B1:21:E0:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/94f98b1f-5228-3388-9822-6ef85db08a21.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 15967
IP address blocks: 185.248.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:57:40:68:ad:95:68:88:14:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4190a890-d7ce-4ea4-a558-53090be01bab
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=5390f8b7-1488-4925-b089-bcb8245b8c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d7:c4:05:a4:12:b7:d2:52:e9:4f:9d:92:9d:
b4:9e:d2:7b:e8:bf:e2:57:39:68:83:3a:58:62:37:
69:d9:0d:e5:c9:97:6b:be:47:19:a1:70:46:66:a3:
75:88:2e:4f:d4:a6:8e:4d:51:dc:0c:4f:df:9c:59:
73:f9:1c:a2:7c:e0:f5:35:0e:81:f2:5e:2f:d1:9b:
47:f0:1b:48:3d:1d:86:1f:82:f1:65:73:c5:33:95:
a4:70:e8:50:68:de:69:0b:48:e0:2d:30:39:e6:f0:
72:06:94:e3:d5:62:45:a2:a6:8b:de:fe:b9:8c:2d:
30:68:92:02:e5:cd:08:cd:86:46:16:9a:db:76:da:
3f:10:eb:10:e9:52:59:5b:d9:05:40:11:2f:3e:9f:
da:d2:5b:4f:33:12:0a:12:0c:9d:1c:9f:1d:12:1b:
22:80:18:26:de:33:e7:3d:5f:fe:f5:4f:d7:2c:82:
0c:b6:2d:ee:20:36:ca:b3:1e:15:f8:55:92:08:46:
a0:cf:34:af:3c:2b:14:d9:72:7e:eb:84:ba:e1:32:
c0:57:a3:8c:1e:f9:dd:f0:6e:aa:03:82:55:64:51:
a3:fc:dc:52:40:cf:67:a7:3e:fb:bf:be:6b:8b:51:
57:c2:ad:2c:b8:d9:ee:fa:da:d4:87:b4:68:63:78:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1D:C6:04:A0:65:02:B2:39:94:CE:65:9E:D0:20:AC:64:30:1D:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/94f98b1f-5228-3388-9822-6ef85db08a21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.crl
X509v3 Authority Key Identifier:
keyid:AA:A8:98:B8:A7:9B:46:D4:9B:4E:1D:A2:5B:03:C8:B4:B1:21:E0:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer
sbgp-ipAddrBlock: critical
IPv4:
185.248.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:f4:89:6f:2e:eb:78:ae:75:6a:64:61:f8:5e:e6:7c:ff:4f:
60:ab:a0:c8:9e:f2:63:3a:50:61:94:86:bc:4c:7d:14:af:34:
89:b6:74:4b:61:5b:7c:a9:87:a4:92:67:4e:51:79:2a:5c:a9:
b5:07:df:87:e7:dc:7d:58:fc:f5:90:37:cf:bd:21:46:8e:da:
9a:bf:f6:29:15:62:fe:ad:68:b0:f7:27:1c:c5:f3:75:0d:63:
3f:b3:33:19:c5:2e:8f:d2:f4:2e:1a:90:30:4a:8b:ae:f5:ba:
27:ce:ce:30:2c:a6:52:f2:d1:3c:7e:a4:e1:4e:df:98:30:01:
bd:0e:a9:27:bd:ef:2b:02:e5:2a:7f:da:9e:e5:fd:7e:7a:9e:
dd:71:d2:45:39:66:a4:1f:7a:21:78:36:a5:51:27:90:d3:41:
67:1c:00:3e:4a:ef:87:93:c8:02:52:08:81:7b:62:3a:2a:7c:
0a:26:51:69:42:c5:4f:0e:4c:7e:6d:78:01:2b:85:cd:1f:b2:
27:09:23:e3:e2:f1:da:a7:cf:f5:32:20:f6:d0:ef:1d:11:b2:
bc:2c:43:d6:2f:a6:cd:d4:3d:f6:81:e1:df:10:44:43:87:ea:
fd:e4:2d:9c:b1:d8:56:1f:51:1d:54:c7:d9:e2:ec:e4:a0:54:
d6:ca:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:25:09 2025 by rpki-client