Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa
File: 9be939da-ddc1-31ed-811c-e2e734533c03.roa (raw, json)
Hash identifier: 3LpIcftV8dCFw95ZkwXDh0bCTuW9G+Q2xrd8V6FO2oI=
Subject key identifier: FF:14:88:DC:51:EE:9F:6C:B6:C2:A5:71:BE:FB:1F:1C:DD:6B:18:6A
Certificate issuer: /CN=d2584a20-171d-406f-91e5-a70a19be13b8
Certificate serial: 010D0C9F432858489FD096A5618B136F72D83320
Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 18540
IP address blocks: 198.148.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:96:a5:61:8b:13:6f:72:d8:33:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=6b14c857-4bd0-47f4-94eb-e847ed49ae88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:5a:49:c7:be:6f:68:a2:38:18:d3:47:5a:
1e:e7:28:37:26:ae:b7:7c:f1:6e:ab:73:f4:3d:fc:
18:06:64:59:97:49:23:17:45:4b:7b:3d:ae:78:2e:
6f:14:76:c4:91:3c:6f:55:d5:63:90:9c:00:74:d3:
77:49:98:c7:e1:67:8e:08:5a:37:95:c9:5f:62:0a:
88:3a:03:2b:35:b3:17:54:d2:b6:96:11:e5:71:f4:
7d:1c:9a:dd:9e:c8:64:82:b6:3d:e4:66:fc:17:03:
c2:40:c4:62:4c:f9:45:5f:e2:d2:94:92:ea:b9:0a:
d1:99:38:d7:66:79:06:dd:81:92:a5:f1:11:4f:ae:
65:4c:f2:3c:c2:45:62:07:3d:45:e1:b8:7c:6d:36:
68:60:6d:da:3d:d7:b6:f3:6f:cf:41:1f:d8:50:70:
37:3f:62:68:0d:50:fb:d8:b9:9d:46:28:4f:9b:52:
d9:49:fe:7a:f0:db:88:dc:ca:16:e7:17:b7:fe:f8:
30:f2:0e:fe:1f:fa:8f:cd:5f:91:ea:93:27:00:56:
f3:59:7f:6a:cc:ae:d6:aa:36:d1:57:87:20:47:8f:
70:cc:e2:b1:61:f6:f2:2f:96:2a:1f:9a:c5:2a:6c:
cb:92:ad:4b:05:19:1a:32:4f:fb:d4:04:92:28:f5:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:88:DC:51:EE:9F:6C:B6:C2:A5:71:BE:FB:1F:1C:DD:6B:18:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl
X509v3 Authority Key Identifier:
keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
sbgp-ipAddrBlock: critical
IPv4:
198.148.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:bd:9c:d6:c0:d1:fc:a8:07:21:17:45:80:18:e9:8c:05:ff:
4c:99:66:65:8a:37:22:72:bf:e0:ba:b8:de:1a:ab:53:e4:10:
d7:f3:48:3c:ac:55:18:43:c3:be:e7:4b:8a:82:e7:95:56:bd:
29:fd:16:39:15:40:ba:b4:81:d7:cb:08:3e:2a:06:d9:fa:2b:
b0:0c:aa:61:11:49:98:38:35:b5:24:d1:10:19:cf:54:5e:56:
97:74:66:9e:d5:9d:8d:3a:78:75:8c:67:ae:eb:58:cd:5f:c7:
0a:55:24:e8:92:1c:f0:93:2a:a5:ce:a0:e8:12:7c:5d:40:12:
1e:92:82:ed:dc:00:8a:41:93:c7:ba:91:b5:64:f2:1c:83:a6:
0e:fd:1a:f5:90:9d:62:58:ec:ad:fd:b4:50:56:2b:a1:ab:fc:
90:51:08:e5:b0:79:fd:7d:64:e4:88:ec:1f:67:46:3b:ed:eb:
35:23:81:88:18:70:dd:bf:2d:2b:af:e8:81:59:d3:93:b4:25:
4a:3f:e8:99:85:71:4e:38:3e:86:9a:8f:0f:a5:a6:09:87:9d:
72:e3:ea:a3:fb:db:8a:2a:10:2a:03:00:c8:88:e2:3e:6c:5e:
64:76:37:7a:0f:ce:2e:e1:ab:8e:7e:b8:76:a5:ed:e0:a5:af:
0b:ab:aa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:10 2025 by rpki-client