Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
File: e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa (raw, json)
Hash identifier: O1/Q7JnLqPBk70u2+T1GZ2JnpfqYxDxiTDNEu2ebXu8=
Subject key identifier: E5:89:D2:0A:52:D3:B9:A3:4E:67:ED:78:CE:65:38:62:3C:B6:CA:4D
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F4328584909E6A4F83797F22353922780
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 394437
IP address blocks: 198.35.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a4:f8:37:97:f2:23:53:92:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=a783fc06-1694-497d-8190-342712125264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:88:09:2f:d7:7f:b6:3d:69:a1:fb:65:fe:
96:47:a6:12:54:dc:ba:2a:ce:ac:ee:ad:61:3d:77:
82:ad:ce:3e:03:75:11:a6:fc:bd:34:49:57:69:ec:
0e:fb:98:be:28:87:4f:d6:67:9f:cc:5f:fe:7e:d3:
e2:2d:73:a8:f9:ef:de:c4:1c:79:5d:f6:5e:75:29:
7d:0d:d8:72:8e:36:34:98:a3:3d:d4:13:9d:60:79:
5f:f2:27:f9:68:52:5f:33:47:17:c4:90:14:04:8f:
e6:10:05:20:26:ba:ac:c2:dd:0e:e3:38:be:2a:89:
2b:22:6b:fd:46:f8:6e:55:71:21:56:1b:58:93:68:
da:8a:3e:6c:7a:46:5d:fa:67:35:80:3d:51:38:b2:
32:cf:a5:5f:8e:04:70:7b:ae:14:b1:b7:81:f4:42:
6f:27:74:e2:88:3c:0e:97:e3:b3:e6:c8:a0:d6:d4:
fa:81:8c:ed:08:b9:ac:64:5e:aa:e1:14:0b:3c:4d:
02:da:f2:80:57:f3:ef:e8:81:cb:fe:01:e4:44:5d:
5f:6b:4b:0f:bc:fa:09:85:70:b8:92:d4:a3:1b:13:
9b:fd:89:6a:22:5c:9a:67:29:ba:a4:bb:c0:12:8c:
50:a1:82:70:45:df:3e:ed:db:b3:9c:2c:8a:9c:18:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:D2:0A:52:D3:B9:A3:4E:67:ED:78:CE:65:38:62:3C:B6:CA:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.35.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:ad:18:03:2a:37:7d:de:cb:99:65:42:e4:40:b9:d2:e3:58:
73:22:77:c2:d8:7d:ca:d9:c5:3f:45:96:03:b3:72:57:31:9b:
31:14:87:99:a7:f0:88:43:5f:0d:53:3e:8f:dc:0f:bd:2b:7a:
87:e0:30:48:ef:2e:08:0a:0d:9a:fe:68:76:33:ab:61:a4:97:
f4:71:f3:d8:17:35:bc:1f:4a:56:e0:61:47:4f:a4:ef:80:ba:
d9:74:7a:6b:29:91:a6:1b:5c:60:76:61:32:19:d2:b9:70:67:
92:54:b0:15:58:33:b4:83:56:d5:3a:c7:bd:6f:7d:ba:5e:b4:
37:ef:85:cd:d4:bf:e5:b3:70:f1:ec:2a:66:0b:e0:ce:9e:d4:
c9:fb:55:4d:58:0b:0a:2b:6a:95:4c:48:5d:22:9b:5a:9f:5a:
91:a6:92:e1:4e:6f:3c:47:7a:9b:19:e4:35:23:0c:e0:01:e8:
38:0b:ef:78:83:59:8a:35:d1:b9:60:a1:7a:5c:db:1d:d3:a0:
87:3b:31:7f:6b:4b:3a:92:c0:7c:87:bf:22:ed:35:5a:9f:d4:
d6:9b:44:bf:6f:82:b0:1d:9b:a7:40:83:72:4b:73:53:50:a8:
26:6f:41:37:4e:23:b9:9f:f8:66:02:b0:74:30:d5:0d:65:93:
a6:a3:69:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:38:01 2025 by rpki-client