Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fff3cc3b-0a8f-3279-a9a6-2be9d50f8586.roa
File: fff3cc3b-0a8f-3279-a9a6-2be9d50f8586.roa (raw, json)
Hash identifier: PtTJ3Y63tdyPoyeiAZX155dHCHeM5Ned8V6kNV/ORjQ=
Subject key identifier: B1:18:60:B4:DD:BD:B8:74:B1:81:51:E3:1D:B8:1B:A9:F4:D0:A8:9F
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584880352C628F5F6B99EA76E120
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fff3cc3b-0a8f-3279-a9a6-2be9d50f8586.roa
Signing time: Fri 10 Jan 2025 18:17:30 +0000
ROA not before: Fri 10 Jan 2025 18:17:30 +0000
ROA not after: Thu 10 Apr 2025 17:17:30 +0000
asID: 65337
IP address blocks: 198.154.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:35:2c:62:8f:5f:6b:99:ea:76:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 10 18:17:30 2025 GMT
Not After : Apr 10 17:17:30 2025 GMT
Subject: CN=18227db5-bad7-49a0-83ba-e509895b6b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:89:80:32:67:be:db:68:ba:0b:6b:f8:30:20:
80:39:87:e7:c8:78:9b:99:be:a2:38:9c:de:aa:4c:
b3:00:6b:12:9d:92:db:9f:b0:00:a5:f4:39:b0:a1:
76:df:26:9b:0f:c0:19:20:29:1c:43:a2:43:ce:b7:
ad:08:51:d6:a3:15:5a:c4:b6:35:68:b2:f4:d4:aa:
f3:07:d2:5a:46:b2:2d:05:f9:69:92:0d:fb:85:72:
ee:94:ec:3c:10:af:9c:f4:c1:1a:fd:98:97:b2:9d:
22:40:f4:21:55:5d:0c:e6:a0:df:26:e8:ad:1e:98:
57:c9:ca:b9:63:f8:29:8f:1a:c1:52:ea:ac:f5:3f:
83:58:b1:69:cd:45:93:8d:0f:77:6b:2c:8c:25:56:
a8:20:23:af:00:d1:f7:a9:2a:d9:06:d3:3e:df:40:
e7:c8:5b:85:ca:38:27:43:72:af:e7:50:c8:9f:18:
68:c7:23:e0:b4:ed:b9:8a:95:48:22:ac:dc:93:da:
3d:3a:8e:98:01:58:c9:c1:72:8c:9f:35:66:fc:3e:
40:c5:d0:72:94:ab:aa:ce:cd:27:1b:20:ed:9d:92:
b4:13:05:f0:e4:ed:21:07:0d:a3:b2:bd:36:c3:68:
d7:fe:55:2c:33:e5:14:ea:c1:8b:e7:51:1a:5a:7b:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:60:B4:DD:BD:B8:74:B1:81:51:E3:1D:B8:1B:A9:F4:D0:A8:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fff3cc3b-0a8f-3279-a9a6-2be9d50f8586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
198.154.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:8a:4a:a3:09:c9:7e:f0:b9:3c:a8:a6:89:f1:07:3c:40:f9:
c2:c8:ac:71:42:21:c2:0f:00:7e:a2:d6:ed:ef:7d:97:83:aa:
db:c0:26:00:b5:18:c4:84:cf:58:bf:91:5a:56:53:b7:3d:fc:
70:40:9b:17:bb:28:24:cf:76:37:52:1e:a9:20:cf:b8:b8:f0:
02:3f:6c:5e:fc:f9:44:a4:94:f7:34:b6:13:b1:fd:ec:f9:c4:
06:02:57:4e:87:36:e9:0f:8f:de:a5:58:28:e6:5c:7f:20:93:
9f:7f:4a:fc:34:9d:c9:96:0e:03:8b:74:13:08:f2:d6:85:ee:
94:31:78:7e:1f:72:37:86:47:5e:1b:dc:ad:08:3f:a5:de:be:
2c:f5:9c:43:b4:d3:53:18:25:26:4f:2b:2b:5c:c6:3a:92:9f:
1d:d6:4d:1f:2e:57:c7:a8:06:85:a4:6f:e5:4c:89:8c:a5:07:
0b:51:8f:a9:5b:3c:52:16:66:31:e3:ea:29:54:db:b1:5e:2d:
c2:e9:40:43:e9:e8:24:3f:39:0b:20:09:fa:60:23:e8:85:a0:
3e:ce:8d:6d:31:4c:7b:0b:e4:9e:f4:93:25:76:44:be:76:01:
27:17:25:aa:bb:11:1e:b1:2c:ec:5d:02:91:c7:5f:0d:d7:40:
d7:df:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:32 2025 by rpki-client