Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/f2189d6e-324a-3954-89b5-ae06ac8923b9.roa
File: f2189d6e-324a-3954-89b5-ae06ac8923b9.roa (raw, json)
Hash identifier: fViENfZ45vc71LcGPMS3TR4Cjk7PBCbr6DRTJvdaplg=
Subject key identifier: 24:66:1F:3B:60:15:F4:F9:42:2F:A1:4B:6E:EB:D8:4B:25:38:88:6C
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69E80407B09FA81907F40
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/f2189d6e-324a-3954-89b5-ae06ac8923b9.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 8560
IP address blocks: 198.251.64.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9e:80:40:7b:09:fa:81:90:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=125f616a-deb7-4fd6-afc6-3bb001df5568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:a8:f5:d4:5f:d2:da:40:c3:c4:0d:a8:4b:
ec:b1:3b:15:76:3e:6e:ba:d8:49:0e:cc:18:8c:9f:
1f:1c:0a:cc:cc:bd:85:7e:ca:02:47:79:50:e7:84:
fd:ed:b3:da:b6:87:23:2f:b9:a7:8f:a7:30:e3:34:
5b:ba:a8:aa:54:be:77:fa:1a:fd:35:ba:5d:74:f5:
3f:4c:cb:17:76:3e:23:90:b6:6c:c4:ec:c2:2a:c0:
90:4d:c1:9e:96:eb:a0:45:d4:f9:6c:d5:fc:21:f1:
b8:4b:6b:b3:95:57:c3:33:a7:f6:4e:0b:ce:82:33:
f1:13:8f:2d:c5:97:71:a8:82:2f:d6:f5:89:86:b9:
10:0f:e6:13:16:e6:a0:a9:53:a1:48:77:a3:49:e2:
6c:7e:fe:74:a4:7f:1a:3f:50:12:c9:d5:26:fa:9b:
ba:a3:bd:12:e3:d3:e0:45:5f:e5:7a:4a:e4:43:af:
ac:94:f5:d7:f9:c1:85:6e:e6:a5:1c:66:59:20:fb:
3a:c5:e0:a3:5b:30:48:94:78:32:9b:8e:34:03:45:
1b:ba:83:c7:c0:70:96:e4:a5:62:80:6c:56:df:a5:
be:27:1e:6b:4e:5b:a1:e5:a5:ff:04:44:2b:44:95:
b7:81:71:e2:73:59:5c:29:43:b0:59:17:cc:7d:a2:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:66:1F:3B:60:15:F4:F9:42:2F:A1:4B:6E:EB:D8:4B:25:38:88:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/f2189d6e-324a-3954-89b5-ae06ac8923b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
198.251.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:43:af:c5:12:99:8b:8d:fb:d4:23:95:f8:09:e7:3f:f7:2e:
d3:2b:37:6c:93:82:66:1c:82:c6:cc:76:2a:00:49:40:25:14:
6d:be:66:01:24:bf:c7:27:a7:63:f6:1e:0c:86:56:72:ca:d4:
d9:51:5a:f6:aa:7f:e4:6a:ca:e5:d7:f0:b1:0c:02:8f:62:77:
15:71:71:73:6d:01:ce:eb:d0:04:67:c6:5c:5e:15:77:6d:1b:
67:9b:ef:c9:cc:d6:91:87:71:59:14:7a:de:11:31:df:1b:33:
74:21:be:0a:6a:65:d4:00:24:af:9a:f9:10:42:21:cc:88:36:
17:d9:0b:5d:7a:1e:17:30:0f:c8:96:60:32:f9:94:21:ba:e7:
f7:40:fe:c6:82:1a:86:16:a4:1f:d7:8a:34:92:32:9b:f6:a2:
69:0d:69:80:c5:5b:27:96:0c:23:03:3f:ec:53:21:2e:47:dd:
d5:91:27:cb:2e:94:41:eb:7c:e0:1c:77:8e:67:27:1c:ec:f4:
4b:a4:37:64:88:67:b7:5c:2d:79:83:59:d0:11:3e:2f:ec:f2:
35:9f:4e:4e:e7:1f:d9:94:94:c5:32:77:c9:9d:e8:0d:57:63:
af:64:dd:ba:1c:58:e1:fe:f4:76:eb:41:85:55:a1:c2:5f:b8:
ad:84:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:42:04 2025 by rpki-client