Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/a3262b96-5624-3bd4-8b93-522967b4a947.roa
File: a3262b96-5624-3bd4-8b93-522967b4a947.roa (raw, json)
Hash identifier: Se2VQf/esizb4kZVJU2pPVbDKvhTg1f6k2S1qOgD6ZY=
Subject key identifier: CD:3F:81:ED:25:BE:38:BB:E3:E6:66:F1:06:99:EA:D9:79:AA:FF:7B
Certificate issuer: /CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2
Certificate serial: 010D0C9F432858487B85B80E22B8FD330D8FE880
Authority key identifier: 58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/a3262b96-5624-3bd4-8b93-522967b4a947.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 3477
IP address blocks: 198.51.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b8:0e:22:b8:fd:33:0d:8f:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=02a049da-3119-4c1b-9749-ee22080be2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:90:e9:fe:e5:b5:bf:67:6e:c1:cd:2f:41:
ec:46:a3:61:76:fe:74:63:39:c8:21:99:8a:94:54:
4d:f6:b8:f8:10:d3:27:96:1a:1a:86:89:88:1a:3d:
a0:52:6f:e4:f9:2b:02:df:17:18:4d:4d:9f:9c:8f:
6d:08:dc:52:ad:32:3c:4e:fe:a2:af:d1:d4:dc:f2:
19:ab:ed:bc:fa:65:a6:b9:3f:52:bf:1f:5d:75:c0:
c2:ce:a1:80:22:0b:52:6b:2e:5f:36:25:c7:e3:d8:
a6:68:b8:32:7e:62:ef:93:4d:d3:af:b9:9d:fc:fe:
c9:cb:04:40:29:42:60:4d:61:8f:02:68:30:1e:ed:
38:9e:54:30:1b:1e:93:b5:da:21:4b:1e:14:e0:bb:
5c:cb:53:1d:46:1b:fe:8e:bc:87:22:86:19:95:5a:
1f:7a:63:fa:a9:53:27:39:1e:a6:6f:aa:53:16:23:
bb:2f:79:58:3e:e5:62:9b:f8:8e:e9:75:87:22:66:
66:84:7c:fe:d1:3d:67:e4:b5:e6:f6:d0:6d:9f:bc:
54:48:4b:51:71:f8:88:92:62:f3:0a:8f:27:8a:4a:
7b:43:a4:b6:16:6f:27:3c:34:93:cf:86:0b:87:65:
33:79:4a:ff:48:9d:2c:15:ac:d9:48:a1:42:9b:67:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3F:81:ED:25:BE:38:BB:E3:E6:66:F1:06:99:EA:D9:79:AA:FF:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/a3262b96-5624-3bd4-8b93-522967b4a947.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.crl
X509v3 Authority Key Identifier:
keyid:58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.51.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:fe:f7:7b:73:ac:26:e1:5a:7e:76:52:78:24:22:f5:f2:19:
ac:4a:70:c7:99:39:23:be:81:d7:fe:46:c2:49:9b:0f:9c:e4:
4e:91:1a:fc:1c:d3:d3:95:c3:2c:61:2f:99:f5:8e:46:b9:0e:
1b:d6:bd:ca:a9:92:4c:23:b1:b1:4f:2a:cf:c7:05:7c:d0:a3:
73:b1:46:32:79:bc:14:10:0d:50:61:91:57:2d:f3:a0:aa:6b:
f0:e5:90:52:1e:44:7e:3e:0c:ae:0e:3c:cb:4a:10:e3:fa:38:
42:fb:aa:d2:be:d2:74:b8:6f:81:37:60:e0:f3:84:92:2e:66:
e8:03:5d:e8:41:72:15:ed:1a:55:25:00:3f:c3:f7:9b:53:34:
7c:8f:9f:d2:a8:79:26:53:b4:d0:d9:48:ba:f9:99:94:b1:50:
9e:8a:7b:d8:0b:6f:cc:57:e2:16:d0:b7:d0:38:39:ee:a5:e5:
a2:3a:c4:a3:66:cb:4d:af:41:f7:a3:e1:de:de:29:13:02:c3:
ee:45:f6:e7:23:ef:de:0a:6d:09:7d:53:aa:ef:b6:fb:e3:2b:
7e:c0:05:2a:a0:0f:b1:de:2e:2f:39:8a:36:75:aa:e8:84:8e:
c1:45:a8:fb:13:ff:4e:d9:9f:18:97:48:15:b5:76:33:24:9a:
47:c4:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:56 2025 by rpki-client