Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa
File: bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa (raw, json)
Hash identifier: FGA2KHU6oddUVwS7T8rsu+/D41my8/K6L2s8kRTqFYg=
Subject key identifier: A7:07:AB:5E:57:6C:C5:63:21:E2:A4:5E:9B:0D:19:95:41:E6:8F:F3
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F432858495384553B0B2C1EC44CC40C00
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa
Signing time: Thu 27 Mar 2025 10:52:33 +0000
ROA not before: Thu 27 Mar 2025 10:52:33 +0000
ROA not after: Wed 25 Jun 2025 10:52:33 +0000
asID: 401585
IP address blocks: 198.176.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:84:55:3b:0b:2c:1e:c4:4c:c4:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Mar 27 10:52:33 2025 GMT
Not After : Jun 25 10:52:33 2025 GMT
Subject: CN=8dfbdb8c-544b-4471-a3a6-648093239dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:29:de:64:be:5f:a3:b5:d9:fa:2b:45:9d:
16:1c:3b:77:55:9e:2f:cc:25:5f:e4:7a:62:9a:2e:
0b:4c:38:dc:2a:a5:ea:01:d5:3f:0b:ae:e6:5f:7e:
47:35:8e:f9:d9:a2:ac:78:b8:ba:e4:0b:17:bc:6b:
95:59:79:f1:36:fe:a4:5d:6b:42:34:62:db:d8:39:
29:2c:8e:a9:c9:29:df:61:ab:59:95:b6:ab:2b:08:
4f:82:7d:06:22:a9:78:09:c0:80:62:47:5d:f4:c9:
99:96:7d:9a:8e:db:e6:84:66:c8:36:30:21:a8:a9:
61:89:d1:73:5e:43:fe:ea:c5:56:c7:e7:cb:56:c5:
99:1c:3b:67:c2:a0:fd:56:55:17:6c:cc:62:cd:a3:
cd:32:9d:94:dc:6b:7d:63:db:26:19:51:1b:5b:9f:
ec:2f:63:af:eb:47:aa:04:c9:f6:8f:09:a6:fe:de:
eb:87:e5:9c:58:cb:48:fc:d7:b7:1d:4a:ff:f4:a2:
04:89:4e:3f:24:23:84:76:09:45:47:05:85:16:a8:
d9:88:cc:c5:2b:5e:30:01:62:d3:70:33:e6:9b:e3:
36:e2:9a:50:9d:18:77:8f:e1:42:5e:41:75:e3:59:
ac:64:fb:d3:07:ff:cf:70:67:34:fb:90:bc:de:cd:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:AB:5E:57:6C:C5:63:21:E2:A4:5E:9B:0D:19:95:41:E6:8F:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/bdd424bd-5955-3ea4-92d6-509aa3be19fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
198.176.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:3d:a0:a0:b7:c5:51:1c:9d:db:2b:d6:b8:f9:33:3a:5d:c6:
75:b3:34:96:81:93:50:6d:b1:a9:fd:1e:4a:4f:46:5e:67:c5:
df:24:79:6e:39:71:2a:54:fb:c3:3b:85:dc:41:1a:41:74:ab:
b6:fb:5f:13:82:4d:cb:ed:71:75:5a:ee:d7:61:06:fb:57:4a:
69:93:59:9c:49:98:29:5a:9c:e5:3c:64:f3:26:80:45:01:d1:
1e:63:5d:ff:ea:45:99:76:83:c5:ec:aa:40:b9:c3:54:0c:e5:
fb:51:4d:83:69:fd:c1:82:de:a3:e0:c4:94:a5:14:d1:6c:76:
8e:9e:0a:02:7b:26:f1:3e:27:4c:3d:3e:08:0f:12:76:3f:a3:
08:eb:32:85:ab:8a:10:ea:7d:d7:f1:e2:8c:29:b0:3b:ff:e0:
c2:f1:81:10:c3:88:9e:80:81:b3:13:a4:58:d5:00:36:59:92:
90:b7:1c:91:93:0e:63:3b:8c:6f:eb:f3:81:fb:d9:b2:09:a9:
e9:20:37:fa:f9:f7:2e:70:a4:6f:32:e0:1d:c7:06:80:54:76:
32:4c:74:83:dc:40:9b:bb:63:09:ba:07:a4:68:58:97:af:fe:
fd:fd:35:0e:84:15:48:70:06:78:35:f8:c4:e4:bd:b4:e7:7d:
70:d0:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:31 2025 by rpki-client