Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/5ae4c1f1-b1d2-3f51-bcea-d193e6eecf95.roa
File: 5ae4c1f1-b1d2-3f51-bcea-d193e6eecf95.roa (raw, json)
Hash identifier: 46/3SOwtEt2iIU2Su38p3Xv0gBY84Op3Q29gZ2OY+Zc=
Subject key identifier: B6:38:14:C3:5B:E8:7B:26:B5:F2:E3:4D:79:FC:15:B4:FB:F8:2B:B9
Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial: 010D0C9F43285848EF6169B722C912B077225700
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/5ae4c1f1-b1d2-3f51-bcea-d193e6eecf95.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 56274
IP address blocks: 198.208.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:69:b7:22:c9:12:b0:77:22:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=32c164dc-b33c-44cb-8f97-aeee97e5c28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:85:a0:a6:70:b8:d2:cd:87:85:2c:b3:1d:
2c:f2:80:ba:54:ed:74:db:5f:a1:8e:1d:48:bc:c4:
56:ee:04:f4:f8:27:12:06:31:8a:86:0c:0d:05:e5:
8a:a2:65:2d:6c:92:76:4f:c7:9c:ae:99:11:bb:33:
1b:33:b3:e6:40:b6:5e:39:40:f5:42:7f:c4:6c:a0:
10:c9:23:aa:3e:a2:cf:a1:6e:25:b6:09:5e:19:37:
e5:b4:0a:ec:ba:34:05:7b:e3:9f:25:db:e7:e4:cd:
9b:af:38:64:fe:50:0a:81:4b:90:5f:a7:0c:f0:0b:
ab:37:7c:7e:c7:b9:c7:a5:ad:74:36:4b:6b:3f:7c:
f6:84:ad:b0:81:24:2f:d2:6a:ea:2a:94:d8:b3:be:
5f:12:be:18:4c:25:d3:cc:c8:b5:cd:96:6e:ba:e4:
ef:48:e6:fe:9e:7d:c2:5c:15:bd:f0:27:0f:cc:88:
7f:69:05:95:53:9f:4f:65:5a:4c:c7:62:fd:f9:14:
53:67:2f:6a:b3:0e:ea:6b:ff:d0:a9:aa:f8:33:67:
54:2b:f9:59:6b:e3:ac:b0:6a:59:e2:d6:a8:c8:44:
f0:4a:e9:d3:25:e3:b0:0b:fa:01:eb:4b:89:0f:d1:
8c:2d:81:f4:aa:4c:48:d5:90:a6:00:77:3f:7a:1a:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:14:C3:5B:E8:7B:26:B5:F2:E3:4D:79:FC:15:B4:FB:F8:2B:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/5ae4c1f1-b1d2-3f51-bcea-d193e6eecf95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
X509v3 Authority Key Identifier:
keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.208.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:6e:5d:0b:a9:7a:62:13:a2:f6:bd:04:5c:7f:a4:df:49:c6:
47:c1:cd:11:c2:f7:51:fb:00:ed:1e:28:52:f8:38:4c:6c:3b:
ea:8b:76:76:95:e8:f8:ce:6f:05:d9:63:cf:45:e1:e0:6e:75:
b9:b1:f2:9f:45:27:21:e8:bb:ea:dc:ec:65:e2:ec:af:9d:37:
0c:19:04:87:9a:e0:2d:16:49:55:bb:74:08:5a:78:6b:81:02:
dd:29:16:e9:ce:92:4b:ab:c6:af:db:ac:cd:46:d2:07:96:84:
56:03:38:36:ec:87:14:d5:e7:4c:60:91:0e:2e:db:06:29:2b:
b3:6b:4d:63:73:d3:a4:a8:e4:82:5e:a3:f9:c4:d8:58:b6:01:
60:38:ef:88:c2:18:ee:d2:e0:33:0e:61:29:e7:bd:98:ea:61:
20:da:b8:da:4d:85:a0:bf:ba:4b:09:6f:69:f3:63:62:21:4a:
82:81:a3:0f:60:a4:29:65:a1:08:29:1a:cc:a4:75:e5:7d:51:
5e:a1:9f:4f:74:dd:e6:96:7d:39:ac:66:ce:1f:4a:f8:6e:cf:
dc:21:f6:3c:aa:a5:a2:27:69:36:e3:e8:22:ad:4a:51:6e:98:
61:33:70:19:51:ab:0f:25:16:b1:bc:6c:bf:ed:2d:69:09:58:
ea:fe:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:32:30 2025 by rpki-client