Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/dece95bf-c6c6-329e-95b3-d90bb402a522.roa
File: dece95bf-c6c6-329e-95b3-d90bb402a522.roa (raw, json)
Hash identifier: H0zVUK+WqnMEpLVXQjfaS1zztjcEjd/48mDtya+Gd8o=
Subject key identifier: E3:51:89:82:AC:F3:DB:C1:19:AA:5B:C1:89:49:1D:D8:12:05:32:B3
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F4328584929E3CE56DAA6F64A5BAC3940
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/dece95bf-c6c6-329e-95b3-d90bb402a522.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 14192
IP address blocks: 198.150.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:ce:56:da:a6:f6:4a:5b:ac:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=686d0d33-bf16-4e38-b124-949054dae3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0c:70:5b:d6:58:1c:66:3d:0d:ba:a1:47:5a:
77:1b:d1:a5:2d:4f:f0:f7:b5:7b:0a:0c:f2:fe:37:
72:60:d0:d4:25:1e:6a:fe:03:23:86:e9:22:d6:90:
c5:33:76:ca:c8:38:96:7a:08:66:5f:3d:94:b0:ca:
45:2e:e1:7a:ac:c1:84:b3:29:89:d9:39:f8:69:72:
fb:a0:3f:f5:31:82:d0:67:54:dd:3c:ee:b0:43:6f:
7c:79:0f:1f:00:46:d1:87:11:8f:68:d2:45:40:2d:
06:15:42:67:20:19:34:08:df:b5:f9:fc:f5:23:a2:
7c:bb:4e:72:2b:e4:33:64:c1:0f:62:d7:a0:b1:e8:
46:e7:2c:4c:19:0c:aa:20:3b:d3:9b:db:2c:8c:af:
d6:a1:da:17:3a:35:f5:5a:4d:3e:fe:a2:ac:e6:9c:
5c:49:40:36:f3:97:ad:38:ad:0c:08:01:67:3e:ea:
2a:7e:55:cd:6f:91:49:95:f0:7d:23:2a:92:48:9f:
ac:90:36:ea:2c:40:22:84:1e:0c:5a:b8:1b:ed:76:
a5:ab:53:67:a3:ce:e9:fb:eb:96:c4:03:d2:b4:88:
2b:9b:0e:b0:02:7e:74:d7:01:50:6c:99:69:81:84:
21:3f:74:26:c0:ba:ef:7b:16:09:ca:2a:06:93:f8:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:51:89:82:AC:F3:DB:C1:19:AA:5B:C1:89:49:1D:D8:12:05:32:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/dece95bf-c6c6-329e-95b3-d90bb402a522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.94.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:5c:2e:fa:cd:b3:2e:cf:5a:9d:84:e8:6e:ba:d2:b0:56:e9:
27:05:4d:2d:cb:8b:e2:54:bc:ca:f0:1e:44:e5:6c:b0:f2:5d:
8e:ab:bc:bc:7b:e4:b4:3e:d1:98:e4:a0:16:aa:3f:f6:6f:e5:
55:c1:67:45:5d:68:0f:c7:e1:c6:7e:75:72:3b:3a:51:74:0b:
08:8f:dc:44:80:cc:9d:bb:7c:a8:c5:a9:5a:da:d6:e2:9e:4f:
03:34:a2:92:1b:aa:0d:68:ce:9b:b3:3d:c3:05:f2:81:bd:fd:
5c:83:0a:ff:c0:a9:8e:1a:d1:8f:8f:6c:50:77:d0:7e:fa:c8:
84:66:b4:06:a1:43:f9:32:d2:9e:3f:9d:1a:53:cf:fa:8f:8c:
85:85:30:86:b4:18:c0:ab:87:19:e5:27:2e:d5:9d:65:31:98:
ae:e4:70:c7:5b:e2:1d:65:ed:69:1d:e2:04:72:90:c1:6a:18:
54:18:3d:15:37:36:42:7d:3e:93:51:18:a7:8d:3a:87:de:f5:
d0:d6:0f:23:c6:3d:7d:a9:68:f4:b1:86:3c:f2:a5:61:75:6c:
bd:11:30:d0:f4:8e:8d:e2:d6:32:18:f6:36:bb:59:38:59:f4:
3b:9c:fa:bf:bd:63:b6:bc:54:7f:9d:60:c5:39:61:5e:30:71:
6d:af:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:32 2025 by rpki-client