Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa
File: 54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa (raw, json)
Hash identifier: w+HM1/l51RsFFM7/d8lGbw4XOIqyExkptO0xqEz0fwc=
Subject key identifier: 57:8A:FF:2A:DF:2F:99:EA:08:24:2C:0F:AC:56:E9:06:B4:CE:E0:80
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F432858487FB5D8C0CCC2DFCD7735BD80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 9009
IP address blocks: 198.145.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d8:c0:cc:c2:df:cd:77:35:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=68d1a561-ca5e-4b12-a5aa-1fc1b52ced24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:c1:dd:3c:7f:c0:39:fa:c7:3e:66:65:fc:
bb:85:f0:b1:b7:44:39:6a:48:88:8b:d1:2e:8f:6a:
d7:a5:20:c1:0d:a7:6c:b7:e4:6f:0c:60:23:65:78:
38:4d:72:1e:f9:9f:6d:ff:ad:a6:c8:b5:3f:f5:2c:
95:28:13:8f:26:53:cf:33:2d:e0:8e:a1:88:c0:56:
c8:3a:55:72:1a:ca:5e:06:b9:6a:b6:f5:47:f5:38:
1e:4f:c6:b5:d7:d8:df:8d:98:18:f5:51:3d:3b:dc:
52:ac:b2:a6:87:1c:78:e5:c7:1b:6e:81:76:09:39:
ff:7c:17:04:c6:3d:26:66:bc:58:d4:75:71:47:74:
2a:b5:56:70:f2:31:da:db:d1:1c:52:5a:a5:f9:ab:
47:37:ec:b2:15:72:86:6d:5b:4b:f0:6c:f4:d6:b8:
a3:c3:96:0f:50:16:34:00:ad:75:4d:57:03:23:8c:
fc:0a:f6:b6:32:c1:06:93:e5:0a:00:38:50:b8:dd:
b6:f0:dc:5f:4f:3a:f6:6d:f0:ed:b8:0e:47:4f:81:
3e:fb:ae:27:e6:6a:5d:af:04:17:ed:5b:dc:4b:d3:
0e:23:2d:eb:c1:aa:fe:a1:12:af:c1:e9:4e:97:6e:
5d:77:ca:a0:89:39:ed:26:00:bd:2d:db:09:b0:c5:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:FF:2A:DF:2F:99:EA:08:24:2C:0F:AC:56:E9:06:B4:CE:E0:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:8f:41:7e:58:a2:0e:29:bc:75:13:17:ee:2f:8f:27:54:44:
19:b4:33:df:0a:d4:e0:e8:11:75:07:9d:fa:1e:21:4f:f8:a3:
ad:63:a5:4a:21:6f:d6:45:12:e5:90:21:78:66:0e:97:17:b4:
10:cd:3d:a4:5c:2d:36:82:2d:4e:e8:0c:c0:cd:2e:f0:ab:e3:
82:a6:a6:81:39:bd:20:89:74:35:53:b2:34:87:23:39:3a:7a:
9b:e8:cf:67:6a:27:bf:a8:8d:18:d0:6e:9b:f3:c6:0c:c0:1f:
4f:51:9b:b6:92:fc:74:7f:87:14:83:c4:da:3f:6b:0f:4f:6f:
b5:8a:d1:39:02:2d:e6:2f:26:84:b8:1b:4b:9a:34:d4:85:70:
23:69:53:33:68:a5:5d:61:95:09:bd:b4:2b:94:59:19:72:a4:
7c:cf:e9:3b:14:53:03:7a:5d:18:5d:c5:c3:ee:04:8a:16:29:
58:42:e2:9e:cc:c4:f7:84:e5:16:21:a4:0c:b8:a9:47:02:1c:
dd:55:22:01:b6:58:ab:df:a1:8c:22:0b:8a:a7:07:a0:8f:4c:
c9:28:72:01:49:0b:c9:56:11:26:f7:bd:79:dd:f7:21:e8:05:
dc:4e:46:c3:be:f6:93:36:14:96:88:23:e8:13:cb:72:0f:59:
5b:fe:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:20:04 2025 by rpki-client