Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/186f3e3d-f567-3334-ac74-13ca2b630fe5.roa
File: 186f3e3d-f567-3334-ac74-13ca2b630fe5.roa (raw, json)
Hash identifier: +rTD75qjn2y8QeyWrAhAtdbP49SUMpRy+PvtbOcXzRo=
Subject key identifier: 57:34:02:FB:EE:EC:1A:48:D7:83:40:5E:19:B1:DC:94:FC:A3:B5:26
Certificate issuer: /CN=1f5fe3e7-3c15-4742-a824-8c933974ab55
Certificate serial: 010D0C9F4328584902EC0E1C0FEBBE04CED32F00
Authority key identifier: 04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/186f3e3d-f567-3334-ac74-13ca2b630fe5.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 14618
IP address blocks: 198.99.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:0e:1c:0f:eb:be:04:ce:d3:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5fe3e7-3c15-4742-a824-8c933974ab55
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=6ce90159-b993-4b0f-a3b2-b8df6c9fc46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:45:a1:0b:90:69:34:5d:d7:3b:f2:a9:29:
41:d3:82:08:5d:1c:3c:17:d0:7d:ad:49:9b:bd:b7:
e7:7a:7f:64:44:6d:ed:bd:81:8a:da:08:55:13:00:
53:bd:5e:7f:d1:ed:da:cd:78:cf:23:c9:1d:ac:c6:
ca:bf:db:8a:5f:84:d3:95:9a:fd:fb:04:9c:0d:cd:
cf:ba:56:03:6c:00:10:76:91:d7:6b:db:e6:cc:51:
5f:fe:fe:67:8b:d2:1a:a5:64:f8:64:fc:71:17:3c:
a5:2c:34:df:71:b2:6a:16:6f:87:32:42:4c:b5:48:
44:93:6d:11:5c:72:37:fe:ca:6f:01:e3:80:6c:ef:
73:e2:6b:91:23:16:e0:0b:be:f9:8a:10:29:f8:6f:
09:b5:1c:4c:03:7c:5c:84:be:a9:a4:44:74:1f:8f:
81:98:51:93:1d:de:c7:d1:55:ba:3e:19:2e:96:3e:
b0:d5:ef:83:02:06:19:ca:be:fb:dc:dd:a2:46:ca:
93:68:cf:64:68:d0:01:95:12:02:37:b4:81:89:72:
a6:1f:70:59:91:eb:6a:9b:80:a8:a4:f4:85:44:40:
22:dd:66:e6:f9:5a:a5:dd:c1:94:e8:97:7e:c5:87:
d1:ff:f1:29:81:1d:28:94:c2:d6:8d:0e:27:25:98:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:02:FB:EE:EC:1A:48:D7:83:40:5E:19:B1:DC:94:FC:A3:B5:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/186f3e3d-f567-3334-ac74-13ca2b630fe5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl
X509v3 Authority Key Identifier:
keyid:04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:08:57:57:f9:5c:e1:bf:4e:dc:4f:b1:74:1a:88:ba:09:8e:
21:cc:fe:38:27:20:3b:60:8f:92:3c:e2:af:65:ca:6f:8e:7b:
77:e7:8b:13:fe:ce:a3:c6:41:fe:25:e0:bf:07:c8:61:cf:9c:
c3:aa:4d:01:d6:a1:a2:ab:28:b8:88:02:a6:9f:23:ed:70:8a:
b5:22:58:27:00:19:20:c9:23:23:27:ae:38:b1:d0:41:e3:9a:
ad:6f:10:d6:fc:b6:63:f0:7f:c7:1c:19:a8:54:70:30:8b:17:
f3:f8:d2:9a:ed:53:2a:81:b6:3b:69:cc:bc:d5:1e:00:a9:23:
fc:59:b2:69:aa:b3:77:5d:b9:c5:11:df:7e:8c:04:fd:a8:23:
4f:c3:91:7b:ee:34:c5:3c:7c:ef:6c:50:21:9e:e3:85:1e:a2:
af:ce:ae:71:13:0c:d0:39:9b:8c:f6:78:20:3d:30:43:da:1f:
08:7b:d8:db:12:49:b5:3a:56:6b:53:4c:84:5f:b1:a0:13:78:
87:2d:70:95:2f:53:4c:f5:dc:21:4e:23:12:36:a7:43:67:4b:
be:d6:87:d8:a6:65:b7:4e:1f:98:fd:4b:c4:e9:a8:93:f0:51:
c2:fe:0a:90:30:71:32:4c:6e:f2:0b:d8:99:3f:ec:23:17:d0:
52:47:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:11 2025 by rpki-client