Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b38f9546-1b60-3c50-9434-3b0f45b90b58.roa
File: b38f9546-1b60-3c50-9434-3b0f45b90b58.roa (raw, json)
Hash identifier: 3hyoGZmx1a2gDcwDDLFiET7wy5u0Ju9mitHVmChpzMo=
Subject key identifier: 51:11:34:02:4C:54:69:8F:33:44:44:2E:E2:F6:41:E8:2C:D1:7A:51
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848960B4FD0EDDCE59CD54BB980
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b38f9546-1b60-3c50-9434-3b0f45b90b58.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 400866
IP address blocks: 198.44.161.0/24 maxlen: 24
198.44.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:4f:d0:ed:dc:e5:9c:d5:4b:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=d167e6e2-817f-4210-954a-cd2bf409a730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:b8:4c:d2:ab:38:4a:22:61:41:a4:f7:49:
53:8d:18:1f:65:af:d8:ec:ca:82:5e:74:e1:85:6b:
1d:b3:e8:e7:31:c9:42:e0:9c:58:f4:85:31:7b:52:
7c:56:a9:74:de:22:ac:70:84:a8:f7:db:f8:c0:ca:
0a:eb:e6:98:02:01:8e:90:a9:dd:38:50:da:c7:49:
2e:97:95:4b:3e:d8:70:e7:24:40:36:20:15:b8:09:
14:21:85:60:c6:39:ad:ab:b1:2f:66:2a:b8:fc:3a:
b4:d1:91:3c:24:20:69:7f:21:6e:5e:37:08:a8:13:
e0:9a:9f:ca:af:56:a0:e3:5e:9a:65:f9:04:66:48:
6d:8e:4e:b9:b9:8f:6e:72:77:35:bd:b5:12:1d:eb:
42:f6:59:a8:ea:33:71:84:d4:db:36:64:bc:c9:62:
82:af:0d:e7:37:09:37:fd:2e:02:32:43:9e:97:18:
56:81:bd:93:80:d1:6f:9a:8d:b5:9c:07:2c:ca:86:
14:0e:e1:97:a2:cb:10:19:fd:1a:03:58:a8:b9:9c:
82:bd:a5:04:aa:93:47:e9:a3:2d:2f:71:17:83:bc:
c8:f6:55:a2:b9:3b:15:54:84:f9:96:e8:9a:86:49:
31:3c:83:4b:0b:03:a4:12:31:50:e8:59:68:55:c3:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:11:34:02:4C:54:69:8F:33:44:44:2E:E2:F6:41:E8:2C:D1:7A:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b38f9546-1b60-3c50-9434-3b0f45b90b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.161.0-198.44.162.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:e4:58:7d:4b:0f:b2:32:51:55:5a:cc:95:1c:e5:7d:25:24:
dc:96:84:7d:2f:54:d2:f1:f9:0c:70:ff:bf:23:84:e6:a2:fe:
8f:a9:03:b8:8b:d6:73:31:b7:18:e4:75:8c:9d:37:54:8a:40:
95:5e:03:e3:68:43:72:45:e6:62:6f:df:71:d2:2b:11:69:cd:
5d:90:2b:3d:e3:84:68:c7:62:18:5b:90:e7:89:e9:dd:db:3a:
81:c5:ab:29:a6:87:65:d5:66:b0:70:11:ea:16:2d:f5:91:ee:
50:dd:ae:c4:d0:1b:3c:6c:25:04:d8:37:73:e7:08:ea:e4:7b:
e7:f8:b7:47:b7:e2:b1:09:33:fd:af:53:20:0f:34:55:1f:78:
98:4b:e7:25:bb:07:25:b5:79:bc:a0:a3:83:fc:ab:44:51:b2:
56:69:93:9f:a5:21:b1:04:1c:2b:0e:82:31:25:e6:0e:14:73:
a9:bd:ef:68:01:02:ef:07:80:3a:5b:e6:d7:0c:f1:06:6a:35:
8e:de:6d:05:0e:d8:af:f5:4e:d6:f9:44:6f:f3:b3:c3:1d:2a:
57:0a:ca:c1:8d:2c:6a:12:ac:a5:4a:c8:d6:56:f9:67:2f:78:
ab:19:16:f4:54:05:5c:ca:e7:bf:98:66:83:8d:91:40:c7:a0:
ff:83:66:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:37 2025 by rpki-client