Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa
File: 4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa (raw, json)
Hash identifier: U+Q5DWNpIfDwm5xmHU3zT7Eu8FB8f1RtNbBmU65jQzo=
Subject key identifier: 81:85:6A:F2:B5:00:64:04:59:A0:83:35:5B:FE:31:2A:77:77:5A:E5
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848E8665A061AE795858384C960
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 137443
IP address blocks: 198.44.172.0/23 maxlen: 23
198.44.172.0/24 maxlen: 24
198.44.173.0/24 maxlen: 24
198.44.174.0/23 maxlen: 23
198.44.174.0/24 maxlen: 24
198.44.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:5a:06:1a:e7:95:85:83:84:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=09e44d45-007d-44ad-a3ea-83a1af4a9031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:f3:a5:b9:03:b3:32:9f:91:bd:23:20:56:
fc:cf:d6:79:ed:2f:a7:60:96:91:99:c2:17:20:4d:
e0:76:14:40:73:d5:15:d5:be:7b:a7:ad:c9:ad:6e:
53:ae:6e:2a:64:6f:25:1f:d4:bb:ec:c3:86:97:34:
c4:cf:c7:37:80:d6:4e:0f:87:47:03:a5:74:21:d7:
b3:39:09:4f:2c:bb:fc:d3:2d:dc:38:52:83:c5:b4:
d8:12:db:51:dd:95:61:46:c6:8a:ac:87:56:b7:cc:
45:28:08:c7:0f:cb:bf:1d:ee:15:97:b3:c5:4d:b8:
de:3c:47:a0:5c:41:b4:49:d8:53:d6:75:95:9c:4a:
ae:19:52:a4:ae:72:64:e5:2e:28:a7:34:54:aa:25:
20:e2:d6:e9:4d:58:7e:6d:eb:0b:1b:28:31:eb:4e:
d0:9c:b4:c6:7d:7f:73:96:58:36:86:8e:eb:a6:90:
85:8c:39:69:76:57:57:d6:70:af:06:f9:6a:03:fa:
3f:25:c6:46:20:85:39:cc:e9:c6:de:be:93:f9:f0:
d8:0e:4e:8a:46:24:65:1d:f8:e1:0c:8a:fe:c3:a1:
51:fa:21:b0:66:6c:51:d8:05:25:1e:2e:e1:6e:b6:
3b:e0:7f:d4:92:db:4a:62:e3:5a:d0:c4:ae:6e:85:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:6A:F2:B5:00:64:04:59:A0:83:35:5B:FE:31:2A:77:77:5A:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:e4:ca:ef:45:74:43:46:ec:60:10:3b:2a:3c:26:98:94:e4:
16:5b:57:3e:19:26:78:8a:72:a0:3c:b3:d5:99:6d:ee:78:8a:
13:d2:bd:61:0d:18:28:4d:0d:7e:08:97:ab:3b:f8:d1:ed:c6:
96:a1:28:15:c6:15:5d:ec:d2:1e:58:b9:a0:9b:0b:27:b6:7f:
72:50:3b:c3:ce:94:6a:9c:36:b8:42:a8:03:c3:a6:aa:fe:9e:
1d:c2:a0:be:fc:57:d3:6b:2b:71:27:0e:d6:7e:35:1c:50:3c:
f0:18:03:83:58:5f:36:0d:f7:cc:c2:2c:ef:56:ff:76:6b:b1:
d5:64:5f:1c:69:54:f8:a2:78:12:af:21:93:58:70:da:14:18:
10:e9:a2:8a:23:ce:8c:a0:d5:d0:20:61:9f:ed:9a:b3:79:2a:
a4:d0:bf:92:46:da:77:02:44:dc:8f:aa:87:29:0d:dc:48:4a:
73:51:cc:f2:9b:90:5e:da:45:bf:dd:3b:ad:aa:6d:e0:f3:2c:
9a:f7:b0:93:93:10:51:4a:95:ba:56:9b:cd:26:19:6e:21:d3:
ac:34:09:46:47:98:57:31:9a:46:10:23:8a:dd:56:83:6e:df:
fa:5d:3d:18:93:7b:1c:e7:a9:ea:fb:c7:f7:30:88:77:d6:ec:
89:f4:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:02:00 2025 by rpki-client