Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa
File: dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa (raw, json)
Hash identifier: JYBT74pMiZNkiTzlvq+jm10zEFBBZK3YYora2t1nssw=
Subject key identifier: CE:8E:CA:C4:CF:28:BE:D8:A7:6C:E9:56:8E:F3:27:E5:BD:21:1A:38
Certificate issuer: /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Certificate serial: 010D0C9F432858490B4C1BD8CF4E468E922E5200
Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 11904
IP address blocks: 198.167.240.0/21 maxlen: 21
198.167.240.0/22 maxlen: 22
198.167.240.0/23 maxlen: 23
198.167.242.0/23 maxlen: 23
198.167.244.0/22 maxlen: 22
198.167.244.0/23 maxlen: 23
198.167.245.0/24 maxlen: 24
198.167.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:1b:d8:cf:4e:46:8e:92:2e:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=1bb03e44-d508-4e41-b5cb-35ebd5b157a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:5b:7f:ef:29:b9:41:b0:28:11:fc:ee:5d:
4d:3d:bc:c3:73:88:dd:bb:85:45:62:ae:5a:1c:f9:
23:f2:69:bb:da:06:c7:83:07:9b:7c:d6:f8:ee:97:
ad:10:b3:24:31:60:21:e2:27:74:3a:07:e8:ee:4d:
36:f2:11:75:6f:79:52:94:1a:d1:96:b2:74:6e:ca:
df:e7:27:dd:08:5d:f1:f7:b9:94:9d:48:10:ff:4d:
f7:d8:95:9a:00:27:27:5a:77:10:e3:09:5e:f1:ee:
94:b3:e9:81:02:91:03:a6:22:e3:b2:00:ce:a5:ee:
8c:cf:49:33:47:35:ad:dd:99:36:75:32:dc:40:a4:
70:f7:5f:b7:67:b5:73:59:50:52:c0:3d:cb:2e:2d:
6d:08:eb:21:c4:61:6f:53:e1:dd:7b:6f:2c:69:ce:
2f:24:fd:6f:cc:d7:c8:68:a2:51:8e:79:b0:c8:59:
6c:ad:7f:06:bf:f1:f6:62:86:a7:7d:03:22:f9:1c:
07:79:bd:75:94:d6:93:d4:77:b3:aa:5a:94:11:d7:
d0:d2:f0:8b:3d:df:fa:89:17:d7:c9:f3:ad:be:33:
5e:de:21:c1:e0:27:6a:a8:de:34:74:ca:4a:35:61:
89:94:12:e2:4f:88:11:91:d9:3f:63:a4:58:27:8f:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:CA:C4:CF:28:BE:D8:A7:6C:E9:56:8E:F3:27:E5:BD:21:1A:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl
X509v3 Authority Key Identifier:
keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
sbgp-ipAddrBlock: critical
IPv4:
198.167.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:1f:b4:a7:fd:d9:f3:28:eb:65:99:1d:79:2a:f5:36:2a:a7:
64:0c:d5:1c:80:73:3a:56:88:0d:73:69:dd:60:c7:55:47:31:
76:2b:e0:e5:a0:8d:2e:b2:a4:a2:82:cb:ab:3c:98:8c:66:02:
e6:e7:45:ea:43:07:e3:46:a5:5b:34:33:f3:e2:7d:f2:75:e6:
cf:ec:f3:0a:cc:5e:aa:04:cb:62:08:e7:a9:15:a0:c9:c4:68:
cf:ea:76:04:66:c8:a8:9f:89:50:3c:b4:81:ff:b5:09:cc:4e:
83:d5:a7:77:30:d7:5c:36:59:c5:04:35:6b:e3:f1:ba:6e:d8:
fc:a6:cf:cf:bc:b8:20:f6:55:48:51:25:56:d9:0f:48:43:db:
0c:3e:54:ce:e4:35:f8:90:1b:9f:4c:be:a1:a3:0c:94:ab:54:
2f:b4:98:17:b2:c9:d2:b1:8e:c5:a0:d0:f4:06:12:54:5d:6f:
ff:f7:57:43:f5:50:64:74:8c:a4:2a:24:1b:dd:5f:02:d1:6e:
27:52:0b:28:2b:63:04:91:3e:9c:4c:61:92:02:01:fe:38:b2:
65:b1:14:35:fb:9c:14:5a:ee:84:53:9e:b2:92:72:e6:8d:d0:
3a:b4:d1:1a:80:5c:af:d7:1f:73:e8:d8:ad:c9:5d:b7:19:c7:
9d:1f:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:26 2025 by rpki-client