Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa
File: 990c86a2-020c-323f-9309-b0b1e6971b6d.roa (raw, json)
Hash identifier: bDbzY97xjSTiIaTMPeQqj3aWslNwDVV4o1cMmWMNKF4=
Subject key identifier: 9C:E7:73:CA:3F:FC:9E:0B:7A:3D:2E:8D:C3:27:DB:8C:A0:17:E0:41
Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Certificate serial: 010D0C9F43285848897B1E8525981380EEE4EE00
Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 59
IP address blocks: 198.133.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:1e:85:25:98:13:80:ee:e4:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=20cd5ddb-eb27-4ae5-a18c-652cc3987557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:98:90:d6:a3:36:5c:c3:1b:27:1b:8b:60:
a9:01:9e:4e:ae:85:61:24:e2:43:1c:93:b6:88:f3:
75:d4:f4:17:7f:d1:49:01:c2:f4:98:08:23:dc:3d:
99:f7:e2:a3:9f:a2:88:24:f3:93:2e:87:61:fe:87:
a5:73:2d:33:cc:f2:24:bb:29:e0:98:bc:12:90:b5:
4d:e0:d1:3c:aa:9c:a5:b6:08:a8:20:0e:ae:6c:2b:
5d:01:92:1c:ae:3f:b6:a8:e0:e1:bc:1e:82:64:6b:
12:8b:92:f9:e7:e2:85:fc:21:6e:80:f3:7f:9f:5b:
85:2c:f7:60:10:b6:e5:72:00:a5:ea:11:46:80:c8:
24:43:f4:ce:76:74:fe:24:dc:f7:55:98:4d:82:7d:
44:a5:f4:e8:57:a1:1e:7b:e4:bf:83:13:9e:1c:ee:
87:ab:f1:da:73:32:ee:66:83:69:c8:bc:d2:13:0e:
16:3e:a5:b3:b9:35:a2:cd:74:83:79:65:90:01:c2:
52:c3:19:d7:3a:53:31:ed:7c:84:20:e2:a2:60:ad:
be:bd:82:89:24:c4:d7:21:07:14:80:88:d0:5f:1d:
10:8a:d0:88:2c:23:cb:b2:9c:60:ef:f9:4d:05:f5:
33:70:2e:43:b2:67:ea:8b:68:c6:5b:14:88:f6:8c:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E7:73:CA:3F:FC:9E:0B:7A:3D:2E:8D:C3:27:DB:8C:A0:17:E0:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl
X509v3 Authority Key Identifier:
keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:fc:0d:5b:4b:ea:e8:4d:6c:ee:10:5c:f5:5d:05:b2:02:2c:
01:ab:80:f3:0f:53:b4:30:eb:92:92:82:d8:78:1e:60:04:4d:
8e:0e:c5:c7:03:fb:d9:51:32:ed:5d:ac:67:ba:1e:07:f9:25:
33:8f:c6:b4:2d:29:0d:3f:50:15:31:57:74:3d:a8:dd:69:e4:
ee:45:41:29:07:f8:9e:90:1f:11:5f:46:34:61:c3:2e:dd:72:
ec:3c:bd:2b:d6:2b:6d:4b:99:c4:6c:d3:e1:14:e2:08:60:20:
b8:2d:f4:10:73:d6:26:fb:3e:18:78:c3:50:ea:80:8c:08:c9:
b0:d9:ee:10:62:50:08:ed:20:b3:bb:23:5a:2c:84:6d:22:22:
96:d3:57:69:1e:8a:86:21:ed:fa:e3:8c:07:3e:c1:66:42:ca:
e3:af:65:8c:df:cd:07:50:bb:6f:17:5a:eb:68:6b:79:94:ac:
64:eb:a9:c8:11:70:f6:47:ff:1f:25:a7:f4:83:b5:24:3a:2f:
79:20:43:c0:89:aa:13:f4:07:cc:d6:b7:12:ac:75:eb:b4:59:
81:a7:43:3d:d6:5c:94:02:91:c0:25:bc:a9:b2:86:94:5a:2c:
23:98:c8:f5:ba:07:85:73:eb:e6:86:6b:8b:9d:a7:ed:4c:6e:
1f:73:4f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:05 2025 by rpki-client