Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/183d89fc-295e-32a1-a289-209268aa32be.roa
File: 183d89fc-295e-32a1-a289-209268aa32be.roa (raw, json)
Hash identifier: NT+lIS/8k7sDxjuO9yR7QRNzWxvx6xbfP7Z1p8txiNA=
Subject key identifier: 01:AD:04:A2:9F:48:97:E4:69:DE:90:74:B0:78:86:B0:E6:44:CA:6E
Certificate issuer: /CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
Certificate serial: 010D0C9F43285849071BE96DD800C3D8CDAFF200
Authority key identifier: 1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/183d89fc-295e-32a1-a289-209268aa32be.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 198.202.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:e9:6d:d8:00:c3:d8:cd:af:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=94e8f552-0e5d-4227-926d-275d2a1b3f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:6e:25:29:f4:bd:e4:54:80:32:fc:ab:54:
63:2f:65:ec:c7:91:ea:ea:f1:6a:14:47:eb:1e:2e:
f5:37:0a:aa:30:22:85:a5:d4:3d:8f:05:ec:23:4c:
ce:f2:c7:3f:6f:bb:4c:3d:d9:90:54:ab:f3:b5:41:
bb:a3:9d:b7:a1:f5:0c:88:84:cc:39:ac:7e:03:38:
74:64:3c:e1:41:b9:75:c1:c2:c5:57:04:59:d3:04:
81:bc:1e:89:0a:9c:6d:1d:06:02:cb:87:68:0a:62:
6f:e5:13:c7:60:00:2b:42:4e:9f:85:cb:78:a6:34:
ea:20:fa:72:5e:ba:69:ac:36:dc:44:63:82:67:83:
89:02:4b:bc:24:b3:ab:f9:e1:e1:ea:21:b1:3e:da:
a7:09:88:32:dd:a4:47:b8:8b:78:56:96:fc:cf:9c:
75:ae:1d:3d:7d:97:18:ea:78:bc:e3:1b:47:59:43:
b6:b4:4f:fc:6e:38:83:c9:36:91:c8:f7:0e:bb:4d:
26:ab:db:e8:a8:0b:fb:15:fe:11:e9:ae:fd:29:28:
73:87:1e:fb:95:29:e5:03:3e:ab:e1:c4:f2:b5:35:
09:87:61:4f:62:3f:fe:0e:51:0b:d3:46:ab:0c:ce:
a8:a3:b0:c3:0a:80:4c:ac:0f:ac:90:7f:8b:c7:af:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:04:A2:9F:48:97:E4:69:DE:90:74:B0:78:86:B0:E6:44:CA:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/183d89fc-295e-32a1-a289-209268aa32be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.crl
X509v3 Authority Key Identifier:
keyid:1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.202.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:00:b5:ee:ba:9b:7d:4c:29:76:40:97:b9:c3:b9:85:79:2b:
85:f3:1c:39:27:73:2b:25:c5:99:f6:8c:77:c0:aa:5d:4b:58:
83:ae:d2:4a:53:80:f5:bb:54:dc:1f:8c:ba:ff:a0:f7:79:9a:
e4:54:20:7e:bb:64:5e:07:79:82:91:ee:91:70:d3:94:84:93:
67:fa:7f:99:e7:8c:78:7d:a1:7a:38:31:dd:0f:24:25:31:1b:
03:54:23:85:fd:07:bf:81:36:00:a2:b4:5f:9a:5e:ba:b8:4f:
dc:13:b7:6c:a4:a7:f6:cf:75:df:26:b6:c0:a6:73:e9:19:0a:
e1:e2:8d:6d:19:86:28:37:94:9c:22:3d:db:32:d6:eb:15:22:
2b:bb:b2:c4:c2:b2:65:10:72:a1:28:a4:0b:b9:9d:f4:a4:f4:
84:1e:8a:39:be:9b:35:0f:8c:00:18:b3:d0:d5:34:e7:c4:23:
e8:91:ff:c5:41:af:79:91:de:68:f5:a4:04:18:9d:b8:c1:ff:
88:70:87:25:80:fb:c7:c7:28:1e:df:fd:4f:e8:0f:3b:d3:d2:
bf:c5:5a:b1:8b:15:c2:39:ef:8d:cb:da:f3:d8:3d:4a:ce:f9:
f6:93:7c:a4:22:73:68:66:f3:9f:e0:ac:c5:6e:8b:5a:7a:54:
a3:62:91:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:34:06 2025 by rpki-client