Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa
File: 23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa (raw, json)
Hash identifier: IBLkjTrCGkR7fH15HZBvF9N/6avLx/MtaLhdz+tyV74=
Subject key identifier: 61:4C:B9:5B:0F:79:EC:B6:33:0D:36:99:F0:76:9C:C1:28:71:E4:D8
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848EC969C2BCBE2CA62110D80C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 5065
IP address blocks: 198.102.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:9c:2b:cb:e2:ca:62:11:0d:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=dfd05de2-4409-4c25-87f0-63d1b587cea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:f0:e5:17:5a:2b:cb:08:08:99:5a:49:ee:
07:b1:3f:a5:05:02:32:d4:5e:38:ad:9b:9a:7e:de:
c0:73:19:47:3a:4c:fd:ef:79:fb:46:a0:88:ea:5f:
6a:46:17:20:71:a5:9f:af:a7:2f:3c:9c:4d:8e:98:
04:74:15:28:52:75:be:33:21:db:03:ff:59:11:ea:
a6:58:9c:14:3e:97:6c:ff:67:c1:25:1d:7c:d2:fd:
cf:f3:18:bc:36:67:06:97:b0:e0:44:37:a1:7c:bb:
5b:bf:83:14:53:f3:29:2b:16:bf:6b:31:aa:43:29:
94:de:03:48:7e:e4:af:29:72:f4:9a:a9:36:b5:f0:
c0:a8:c1:2c:0a:a1:26:59:7e:4e:29:3e:8f:ee:4e:
7f:d6:ce:5f:76:d0:df:6b:26:eb:44:91:d0:65:84:
08:19:79:4a:41:dc:92:1a:b4:38:50:f1:2d:ef:2b:
05:4d:74:06:14:db:00:9e:b6:20:4d:15:5a:64:60:
69:7c:a4:da:b2:4c:d0:e7:85:5a:66:b5:2a:2d:80:
5b:e9:ae:7c:28:53:d9:81:6a:13:38:0b:e3:40:b8:
a4:84:13:46:e2:56:44:52:6f:f7:1d:28:6b:d1:cc:
09:5f:3f:ed:77:e9:84:ed:19:93:97:9e:3c:d4:3c:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4C:B9:5B:0F:79:EC:B6:33:0D:36:99:F0:76:9C:C1:28:71:E4:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
198.102.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:e0:1e:87:2c:58:8d:b3:9f:c7:b2:fc:d4:74:ab:59:34:f9:
8b:ac:c6:92:eb:d3:a3:57:b3:db:35:f1:db:1d:61:dd:4e:40:
dc:f2:63:a6:bc:65:08:25:bc:f9:b5:fd:f0:eb:fe:2f:01:01:
ba:74:53:e5:f9:23:d8:31:27:b4:15:78:cf:3c:8a:86:74:d1:
c3:08:16:c8:b8:ed:aa:b2:16:76:29:f1:a3:c5:0a:42:a5:02:
60:59:83:a5:de:da:9c:fa:24:32:0d:e3:44:a8:c7:18:eb:26:
9a:49:7d:1c:07:e7:7e:57:48:ec:ae:b6:3b:ef:bd:92:9c:d9:
1f:81:c5:c1:c8:e6:2a:d5:73:cd:55:85:3a:31:f7:8e:37:e9:
64:bf:5c:b5:ad:ac:8d:ca:f8:1d:5a:29:20:8c:de:35:a0:7f:
aa:46:ca:ac:82:ba:28:22:24:e0:52:bc:fd:5f:96:ce:e0:f5:
7c:a9:ff:19:20:4a:2b:d8:43:fb:58:e5:e2:0d:bf:67:80:1a:
d6:cf:8c:62:1c:d6:22:cf:3a:ff:00:2f:d3:d2:ee:26:46:38:
2c:7b:b0:78:1d:7d:b2:94:17:ae:6e:1e:c0:cf:ac:d3:99:6d:
5e:91:88:b1:57:2b:1d:1a:d0:87:b5:7f:ab:74:be:56:37:6a:
e8:0c:d2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:40 2025 by rpki-client