Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
File: 546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa (raw, json)
Hash identifier: 7x1hjAneGrkhQYOAYiW4T4EEA7R6B2yLGJjkD4OntHM=
Subject key identifier: 98:ED:72:49:64:A8:80:CA:06:F8:52:27:A2:75:29:D7:A3:AC:F1:6C
Certificate issuer: /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial: 010D0C9F432858489FD09BD0A6BEEE0FAB9910E0
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 394453
IP address blocks: 198.212.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:9b:d0:a6:be:ee:0f:ab:99:10:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=340dd0c8-0285-4923-91e5-ac4f88e7ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:bd:e4:bc:73:e3:c5:ac:0b:94:0f:4d:1a:
1c:c1:95:e5:44:35:eb:23:a2:3e:cb:44:d1:80:a4:
d5:cf:38:43:0d:c1:1d:4c:e5:d3:be:b8:a9:1f:0d:
df:78:87:67:16:15:1d:04:ab:3e:df:4f:23:96:5c:
b0:e2:6d:88:24:e3:1c:30:32:22:f9:59:14:75:7b:
f4:40:69:86:49:19:95:4f:e2:b6:d2:8f:d4:42:68:
db:c8:2a:92:cb:bd:f1:e7:5a:ce:15:c6:cd:b2:60:
96:37:49:3c:60:e8:85:9c:f9:d6:fb:65:95:87:72:
db:9a:1c:5c:64:32:2f:e6:aa:af:d2:23:e4:30:ee:
59:c5:ac:35:cc:13:71:82:df:98:c4:4d:c3:bb:7a:
99:94:04:b8:f9:af:49:32:36:41:83:63:4a:f4:e1:
2b:3e:ca:cb:17:2e:b2:16:e6:f0:86:33:64:2a:c2:
ea:bb:c9:e6:de:9c:0b:c5:62:56:71:c1:bb:2e:23:
63:0e:11:9b:bf:74:aa:08:86:55:66:10:1d:26:05:
2e:3b:ab:00:49:f7:ec:b3:0c:30:cb:13:d8:ec:2b:
9f:b6:68:70:7f:55:d7:f0:d2:58:d9:32:00:4a:16:
d0:5c:0c:e7:16:7b:1e:fa:fe:c6:87:9c:ae:73:6f:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:72:49:64:A8:80:CA:06:F8:52:27:A2:75:29:D7:A3:AC:F1:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
X509v3 Authority Key Identifier:
keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
sbgp-ipAddrBlock: critical
IPv4:
198.212.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:31:7c:cd:34:5b:ae:25:12:40:2e:64:cb:d0:36:fa:37:ae:
4a:9d:06:8a:cc:43:d2:08:d6:9f:e3:f2:c4:a4:38:71:14:78:
54:83:01:36:43:89:5c:c1:a6:67:d3:4b:58:ca:ee:ad:7f:38:
d0:d3:18:69:87:38:ce:85:44:2c:3d:d0:6e:fb:b3:42:75:fd:
bd:40:a5:f2:ff:76:8f:d8:22:3a:2c:39:25:cf:4b:6b:fd:95:
91:36:7c:3a:bc:89:fe:8d:62:7a:a7:e0:65:c9:ec:ae:1b:6b:
49:e5:55:17:31:e3:22:40:2c:ec:3d:b2:16:95:a2:aa:a3:76:
72:db:54:80:63:7e:7c:d6:28:c5:8e:ef:e9:d3:39:be:b4:f4:
15:ce:9d:f7:2d:12:7f:b1:69:e3:96:b7:b0:22:0b:3b:5a:54:
34:91:2d:6d:3d:18:71:6a:52:91:9c:c8:ff:b4:20:a4:b7:e1:
35:09:da:fb:ff:b2:72:fb:b6:20:12:49:30:71:b8:a4:3f:ee:
57:0b:a7:41:a7:55:44:d1:67:96:9c:da:d5:ea:c8:36:1b:e8:
7b:ac:7c:04:86:f6:58:bb:e7:df:fe:71:99:92:81:7b:76:81:
4a:79:28:37:c4:82:c3:09:43:f1:f5:dd:e0:85:f8:7f:76:22:
9f:e0:cc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:40 2025 by rpki-client