Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/c7b39dda-ea98-341d-b061-1d59b768de86.roa
File: c7b39dda-ea98-341d-b061-1d59b768de86.roa (raw, json)
Hash identifier: KjULk9z3oU8LO+5OO23TAhFbXWgwk0WQyqv+zeMLGmw=
Subject key identifier: 42:D9:86:A7:69:52:C5:34:6D:C7:AE:B1:BF:4E:21:0C:E9:10:9A:97
Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial: 010D0C9F43285849002165C2C405DA2752FDFB00
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/c7b39dda-ea98-341d-b061-1d59b768de86.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 611
IP address blocks: 198.164.80.0/24 maxlen: 24
198.164.81.0/24 maxlen: 24
198.164.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:65:c2:c4:05:da:27:52:fd:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=e17747a1-9d5a-438c-a503-a305d45abe43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:76:bf:3b:ff:d7:47:b9:ac:95:da:42:40:
79:b0:37:9d:48:82:c2:13:75:b1:08:19:b1:1e:d7:
cc:69:52:d2:08:82:c1:cc:29:93:39:37:dc:70:3a:
11:89:48:22:e9:e5:4f:30:cf:68:7f:48:cf:1e:de:
2d:12:76:57:19:64:ea:91:65:51:62:93:1a:44:0d:
46:e6:46:46:de:28:f2:d3:95:c9:1c:a6:12:7d:f6:
d5:e6:37:e6:5e:a2:dd:7b:35:a0:72:c9:74:ad:fa:
55:c1:96:15:f2:13:bd:9d:4d:f0:2e:20:0a:d0:62:
54:63:09:90:10:f8:9b:27:04:a1:3e:4a:9c:6b:67:
84:66:9d:ea:d6:dd:70:a4:fe:77:07:88:09:34:57:
d4:08:72:b2:bf:68:54:09:67:35:36:82:b7:a1:7e:
79:ab:29:8c:e0:a2:20:8a:74:c2:f2:13:16:01:f6:
96:29:ec:35:da:e1:c6:0f:52:75:a4:64:8a:7f:f6:
30:38:7a:0d:50:06:e5:fc:3a:c0:f7:68:f6:e7:22:
ee:e2:2c:59:22:45:23:9a:0e:31:d8:02:01:4c:44:
53:a9:23:f9:70:18:38:4c:b9:b3:2b:ed:a9:5b:cb:
fa:24:49:da:9e:b1:79:81:f3:43:ef:a9:a8:c7:5b:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:86:A7:69:52:C5:34:6D:C7:AE:B1:BF:4E:21:0C:E9:10:9A:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/c7b39dda-ea98-341d-b061-1d59b768de86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
X509v3 Authority Key Identifier:
keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.164.80.0-198.164.82.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:7c:6b:77:19:71:e9:c8:14:ee:8f:57:2d:92:96:fa:cb:c7:
b8:fc:a5:ef:1f:45:04:28:06:c7:2b:7d:47:09:1d:8f:1b:c8:
47:77:f4:7b:bf:f3:7b:49:14:11:35:c3:6b:e3:92:6a:2a:7d:
15:a2:73:83:99:27:4e:d4:43:87:b9:c8:92:ae:19:ff:08:09:
2a:32:c9:d5:99:f6:dc:35:63:1a:3d:80:e6:74:26:4e:50:41:
a6:b9:29:ee:37:4e:e4:fb:25:9a:93:ee:e0:23:f7:10:7d:82:
c8:2e:3f:88:aa:7d:af:7d:cd:f7:6b:f7:53:21:9c:66:66:8b:
6f:17:e4:3d:e2:e9:a9:80:7d:db:b6:df:06:fb:5b:da:8e:02:
dc:74:e4:ee:a3:db:91:e4:84:bf:ae:e8:78:0a:81:c9:ba:c6:
37:14:ad:ab:9f:25:11:40:ba:cf:2b:55:8b:89:17:7a:7a:12:
d1:4d:df:e6:89:cb:f0:8b:c5:4d:6d:ef:17:08:2f:8a:88:b6:
18:86:bb:97:1d:36:8f:df:d8:1e:af:4c:2b:93:d0:73:f3:82:
d4:c7:da:3b:40:3d:da:10:82:2b:cd:5e:89:ba:c0:cb:54:12:
bd:8c:16:d6:56:d3:7e:b4:71:41:c7:8d:76:7e:a5:9f:58:1a:
07:df:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:04 2025 by rpki-client