Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa
File: 0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa (raw, json)
Hash identifier: jvcn99OVoovsuvYiK7Ugj1D7bQmsGGx/wLGRsA825Uc=
Subject key identifier: 51:F4:CD:78:73:11:1C:21:3D:DE:0D:F0:47:B9:03:0B:AE:3F:05:58
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F43285848A1360A62980DB850B38F5240
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 7018
IP address blocks: 198.145.132.0/22 maxlen: 22
198.145.136.0/22 maxlen: 22
198.145.140.0/22 maxlen: 22
198.145.225.0/24 maxlen: 24
198.145.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0a:62:98:0d:b8:50:b3:8f:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=e2048b99-721e-4073-b72a-fb61fd28caf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:17:07:b5:c4:28:55:3a:b6:4a:62:5c:6a:
ca:d6:1d:fb:50:81:fa:25:7f:1c:6c:56:9d:48:20:
a2:38:ca:dc:7a:70:90:f4:e4:71:72:1d:54:25:fa:
92:dd:a2:b7:b4:df:d3:2c:0f:19:46:3a:33:f1:5b:
1c:ec:af:da:cf:b3:50:22:12:89:fe:39:9a:c1:fa:
a5:56:64:6f:a6:99:c0:64:a5:c2:83:fe:a8:dd:15:
e0:d0:68:b6:44:1c:01:d3:da:d9:92:f1:35:3f:4b:
f6:42:8d:02:71:ad:cc:f5:7b:65:a9:87:36:f8:ae:
74:1d:18:7a:7a:f3:15:b0:18:05:b8:c0:42:ac:55:
11:e0:16:9d:bb:48:76:96:8a:48:e1:67:47:8e:c6:
10:56:9c:29:95:e1:cc:45:dc:b3:b7:fd:b2:d9:b0:
df:c5:7b:65:60:76:11:5e:58:61:6f:07:73:6b:d2:
af:85:28:8c:f3:92:ae:cb:67:ed:d0:18:d0:de:4e:
3e:5b:cc:74:2c:58:95:06:68:04:4d:18:95:fa:49:
19:f3:b4:cc:4e:e7:82:d5:b1:e3:25:14:da:75:a9:
16:01:19:42:f6:84:56:89:0e:e2:a7:cb:40:73:d0:
f5:12:11:62:42:08:8a:b6:86:e5:69:48:ac:12:bc:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F4:CD:78:73:11:1C:21:3D:DE:0D:F0:47:B9:03:0B:AE:3F:05:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.132.0-198.145.143.255
198.145.225.0-198.145.226.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:c5:8c:29:00:3a:b9:57:70:5b:56:9e:f7:f1:6d:e1:57:47:
5d:fa:36:1d:d1:7b:e5:47:ba:4f:00:4e:6a:91:f5:ef:8b:29:
7c:44:88:c9:06:0f:13:b0:68:8a:03:65:ff:39:66:ee:f5:7b:
d0:b7:12:1f:3f:a1:0c:cf:43:44:93:8d:3b:6a:fa:ee:24:dd:
2b:13:f8:c1:52:5e:d5:1a:88:26:f4:bc:d7:c7:c8:4c:9a:0c:
01:77:a9:84:f3:5a:01:60:e7:b1:74:d1:46:7e:81:a3:d5:48:
d3:db:2e:d9:43:2b:12:91:fb:a9:99:68:65:99:5e:df:6a:14:
9d:44:09:41:4c:4e:cc:ad:f2:8e:26:65:08:ed:7c:04:0f:17:
89:21:f8:c1:d5:ef:69:d4:7c:ab:8e:ce:c3:d9:00:e7:ed:b0:
01:05:73:f1:75:03:e7:87:f0:41:8b:be:60:17:0a:ae:81:4f:
3d:ca:f4:e8:84:49:b9:4d:c9:64:b1:9b:9b:9a:54:95:99:05:
97:a0:1b:c6:fe:37:2c:df:ff:3c:34:7c:eb:4b:4c:62:d5:65:
34:e0:02:6d:be:87:6e:a7:80:4f:2f:9a:78:5e:95:e7:01:09:
dc:a4:77:07:25:ad:5e:f9:82:ca:13:5c:46:71:fe:bd:77:11:
f4:8f:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:53 2025 by rpki-client