Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa
File: 6ae41674-6179-31e6-b383-75fdb87cda25.roa (raw, json)
Hash identifier: Z9xDB9a2Y50/T79GHLl9qLuhuKTCtOVik4ZwImR0ba4=
Subject key identifier: EA:BF:9E:AF:24:38:A9:68:A2:50:74:0C:B4:94:F9:38:38:89:8A:50
Certificate issuer: /CN=9df74e6e-da16-4cba-a854-ee087e767113
Certificate serial: 010D0C9F4328584957F40620D26B6DDC5F47D400
Authority key identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 15318
IP address blocks: 198.168.128.0/19 maxlen: 19
198.168.160.0/20 maxlen: 20
198.168.176.0/21 maxlen: 21
198.168.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:06:20:d2:6b:6d:dc:5f:47:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df74e6e-da16-4cba-a854-ee087e767113
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=2ed0d2ca-9963-406b-9a35-01d3b886d7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:f5:e3:7f:45:97:d2:59:8e:48:cd:29:fd:
ee:f1:ed:b1:ba:43:35:b6:56:43:bf:db:e9:05:0e:
27:dc:fe:38:9d:60:ed:4f:fe:4c:61:f0:d4:71:a9:
cb:9b:c3:ff:7e:c8:6d:46:4a:23:6e:a5:e5:e6:b1:
40:d6:90:c2:5c:a0:f8:6d:27:92:b9:1a:13:52:17:
63:75:66:a1:cf:3e:c2:92:15:22:25:b4:d9:77:6e:
01:90:66:e6:99:6d:22:82:cb:f2:c1:67:24:81:9e:
5f:67:ab:cc:13:74:bb:d1:d4:c8:50:c9:e0:19:1a:
b5:6a:2e:a2:f3:92:13:c9:71:3a:15:6c:c0:fc:dc:
11:0a:1b:31:85:b1:08:59:03:d9:cc:47:8d:78:3b:
db:8b:93:90:6c:54:4d:c2:5e:db:01:2c:d9:cc:af:
66:32:3b:b7:3b:f6:b8:6d:a6:0a:ae:58:8a:77:d3:
03:22:d0:a2:35:83:9a:d0:ff:42:23:67:9f:1d:00:
01:c6:38:cf:73:c6:cb:42:4a:1b:1f:79:ee:0a:eb:
64:bc:46:a8:32:6b:bc:50:1a:93:18:53:0b:82:4d:
65:03:6a:91:67:cd:bb:84:85:df:b8:e5:63:ba:0d:
51:57:19:4a:46:b0:04:4a:26:51:28:29:a7:d9:20:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BF:9E:AF:24:38:A9:68:A2:50:74:0C:B4:94:F9:38:38:89:8A:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl
X509v3 Authority Key Identifier:
keyid:12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
sbgp-ipAddrBlock: critical
IPv4:
198.168.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:d0:2e:83:17:98:24:38:86:8d:6f:be:e5:5a:23:f6:62:b4:
a9:52:1f:49:95:a0:88:db:7f:5d:0d:c6:34:1a:bf:25:30:5d:
ee:c0:d0:c6:db:af:ef:42:18:45:cc:a1:83:f2:4b:c2:fa:99:
a9:dc:44:3e:4d:41:9e:12:9b:df:89:09:66:49:2a:0a:51:6a:
95:ed:7e:f7:c6:9e:3e:73:84:f1:10:55:b2:75:63:e3:b2:6c:
97:a8:27:9e:03:96:e5:77:0f:3e:ae:18:c8:5f:e1:d7:cf:1e:
ca:38:07:3a:f1:ce:f6:79:b2:9d:e2:2a:43:5b:df:b4:67:4a:
95:61:03:5d:76:c1:5c:55:4b:ee:0c:63:5c:22:f6:7a:66:86:
97:fd:c6:66:10:df:21:20:62:ab:80:e3:72:6c:82:82:99:ec:
a1:b7:2a:20:f8:f5:e8:b9:7d:f3:f9:c5:b6:ee:16:fc:43:de:
38:9d:13:7a:10:b6:37:0c:d5:60:49:56:7f:96:89:2c:69:eb:
9f:eb:5b:71:40:c3:ec:68:52:d0:6b:64:0a:20:89:82:22:d8:
3c:0e:88:f8:ef:f4:59:63:e5:e3:aa:b5:4f:c8:3a:5e:dd:b6:
f6:9b:75:ff:4e:8e:ea:71:47:4e:b4:16:05:1f:70:e1:7a:89:
08:a7:40:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:59:01 2025 by rpki-client