Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa
File: 77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa (raw, json)
Hash identifier: f8orKYsy9HjvfwzRwstLxcWJKcvHcfEXouxUoi4ADYs=
Subject key identifier: 46:16:BD:B0:35:C5:08:40:C4:81:17:FC:DC:6E:7D:54:86:13:03:DE
Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial: 010D0C9F4328584957F40092DE88BBD036488440
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 30383
IP address blocks: 198.208.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:00:92:de:88:bb:d0:36:48:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=5a88eb8a-47fc-4bb6-94dc-6f7f5091a8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:05:b9:6d:50:9d:41:91:a1:91:f4:b0:1b:
0c:b6:27:e9:a0:b0:23:7e:35:74:48:a8:ac:d3:68:
c1:4a:cd:37:06:ef:b0:d0:f6:9b:d5:82:d1:50:06:
a2:8b:e4:b4:93:80:de:6c:ab:0e:3c:64:8b:6d:f5:
9e:bb:12:01:b1:d0:45:1a:41:56:62:70:06:39:d8:
f9:0f:93:42:79:12:10:b9:53:a9:ec:b0:0d:9d:6c:
d6:90:98:a6:7f:46:4e:09:65:45:7b:c2:d8:58:00:
0b:74:72:66:00:26:32:52:56:cf:6a:d3:17:70:a9:
76:fb:eb:ba:98:5c:80:94:fe:66:fb:76:f3:48:57:
44:06:1c:48:87:bd:29:1e:95:45:89:4d:47:a8:c1:
b2:b0:bd:31:84:23:f4:f4:9d:2a:b1:a7:df:ea:89:
f4:0d:1e:06:32:da:02:9e:c7:db:1f:b1:be:3a:b6:
7b:69:60:17:ac:ee:c3:50:56:0a:29:a2:5e:5b:de:
fa:de:cb:78:e0:ac:a5:f0:36:be:3b:29:3d:19:c9:
f1:f8:3c:43:fd:1f:28:41:ef:6e:28:63:12:50:7b:
14:08:99:5c:fb:1a:dc:c4:99:cb:fc:10:1b:81:5e:
81:8e:c6:c8:bc:9c:c3:56:58:c8:84:f4:d2:15:8b:
02:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:16:BD:B0:35:C5:08:40:C4:81:17:FC:DC:6E:7D:54:86:13:03:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
X509v3 Authority Key Identifier:
keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.208.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:4e:ea:f3:41:0e:19:85:9c:45:f6:c9:da:65:c3:b0:3c:42:
28:02:41:48:69:9b:26:e7:56:8f:30:40:84:fa:cb:73:84:ad:
e9:91:c6:80:a6:6e:42:30:8d:af:09:a7:35:7b:73:a8:49:1d:
85:72:d4:c6:4d:02:cd:48:23:91:13:0a:3e:e8:b3:6a:11:a1:
c9:be:f8:e6:e0:ad:69:60:42:72:95:f2:c5:60:37:c0:f6:75:
5d:c2:f7:af:83:b3:fb:ad:02:a4:a9:3c:4e:71:2c:9e:3f:08:
f2:54:8b:86:fb:f3:21:7f:e5:09:d5:47:44:73:22:45:8d:15:
0c:41:4a:3c:0d:e3:b0:86:36:3a:90:0e:4f:22:4e:59:84:52:
7c:ac:fe:d5:c6:84:7a:a5:c4:a7:fb:5d:1a:a1:a5:d1:dc:92:
f1:ef:b3:a4:ee:70:d1:09:1d:2e:45:ad:29:7b:f3:cf:9a:3e:
90:7d:a6:a0:8d:32:f7:f5:63:95:77:65:7b:a9:eb:d6:c0:57:
7c:72:d1:4a:37:3d:0a:db:fb:1a:03:25:be:e6:fd:31:04:7c:
58:ab:b8:55:54:fa:29:74:0a:37:4a:66:5e:b3:78:ce:ce:b5:
1d:33:74:48:13:3a:f3:2b:2e:b5:5d:f8:34:35:e7:d4:47:ee:
f8:fe:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:51 2025 by rpki-client