Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa
File: a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa (raw, json)
Hash identifier: pL4yvRVPdNwPRiTzig5Pwpt1z5a9hpRhj1cXSw9XxPA=
Subject key identifier: C7:90:2C:DE:EE:3B:35:27:73:FD:55:EB:BA:BE:23:25:42:29:57:F2
Certificate issuer: /CN=e58dee25-2204-469c-b0eb-da831443b959
Certificate serial: 010D0C9F432858492E13C0734A380A0F34D81BF0
Authority key identifier: 52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 40521
IP address blocks: 198.251.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:c0:73:4a:38:0a:0f:34:d8:1b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58dee25-2204-469c-b0eb-da831443b959
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=d7e4f9d1-7e00-4167-9efb-e9c0b7a40b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:8e:e0:3d:39:dd:73:79:3e:8d:c8:bf:46:
ba:71:d2:bd:a8:22:bf:0c:38:97:e3:19:53:ec:05:
9c:3f:be:70:1e:d8:c2:24:1e:13:2e:6f:c8:4c:96:
c1:18:ea:a8:d3:cf:ed:0b:f8:01:b1:1d:24:42:6d:
78:2d:28:99:fc:41:94:ea:67:2f:63:92:f2:ee:b2:
43:51:6c:7a:13:a7:1b:c1:04:bb:12:f3:e3:2a:c7:
39:b0:02:da:9c:ba:0d:fa:0c:c6:49:79:98:a8:3f:
7f:c2:b7:55:09:b1:89:a5:0a:5f:99:8b:b0:6e:36:
e4:db:f5:c6:39:3c:ff:78:4d:22:e0:ef:f6:bd:ae:
d3:de:5b:d0:b9:8e:0b:be:9a:81:a5:f9:11:6f:8a:
85:d9:66:06:f2:76:23:12:b4:e8:e1:3b:95:9c:fd:
d9:f7:b9:0e:0f:cd:13:28:fd:82:99:91:07:5d:98:
d2:7a:1c:17:c2:db:6d:07:a7:fb:cc:e8:c2:d9:b5:
21:60:d2:12:68:81:04:ea:e9:80:80:35:9e:ce:31:
ac:e0:0e:b2:4d:e8:d4:ec:20:92:d7:08:3b:37:dc:
40:dc:c5:c5:17:f6:c3:48:8a:fd:a4:bb:7c:8b:e8:
fc:cb:e2:e0:88:5b:b0:83:b2:6a:94:81:29:6c:65:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:2C:DE:EE:3B:35:27:73:FD:55:EB:BA:BE:23:25:42:29:57:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl
X509v3 Authority Key Identifier:
keyid:52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
sbgp-ipAddrBlock: critical
IPv4:
198.251.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:4b:8e:be:30:0a:e5:50:89:c5:a0:4b:59:c8:a6:fa:42:bf:
6d:ae:7e:a9:48:82:db:28:45:eb:90:ba:38:33:bd:8c:9c:e8:
67:9c:e7:ad:d0:9f:be:e9:cb:c6:69:9e:bb:66:01:f6:37:d3:
e8:61:83:b0:e0:66:8f:3c:d2:88:32:38:fd:e8:b8:d0:26:30:
99:8f:4e:14:2c:bb:34:8b:41:c5:db:53:1e:f7:ec:81:4b:51:
0a:55:9f:37:b1:c2:54:03:c8:87:57:39:64:00:27:b1:dd:42:
4d:be:0d:72:c8:3c:1a:11:a3:20:8c:7c:83:0e:e0:6b:dd:95:
77:5d:e3:ad:6a:6b:fa:0c:0d:f6:7b:e4:18:69:e8:af:a0:7f:
bc:4e:b6:db:4d:f8:9a:82:2d:55:4b:ab:08:1a:1c:1f:ac:45:
a0:41:e8:58:0d:a1:46:92:d6:d9:2a:4e:c5:dd:1b:a7:32:49:
0b:0c:b4:f0:0f:38:13:63:d9:09:cb:74:f2:bc:9f:a2:99:eb:
af:3c:65:87:2f:56:e1:80:29:1a:8f:ee:3c:da:10:48:36:7b:
f7:33:41:c9:be:06:f6:da:31:0e:53:1f:3a:17:6f:cb:14:52:
5f:e8:bb:22:f7:75:c2:d1:82:dd:11:e5:0f:33:51:60:5d:5a:
af:f7:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:35:22 2025 by rpki-client