Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa
File: 5b09870e-a712-3eab-8443-890377b3a362.roa (raw, json)
Hash identifier: J7Vk7V7375OBb2ZyX0EXDTye0xLDQ0uHHsRIqsDEBpU=
Subject key identifier: D7:46:A1:58:50:B1:9F:08:22:7E:3A:7C:64:EB:DD:5F:16:37:3B:C5
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F432858494E2EAA3FD20FE1EB18F36EC0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 9009
IP address blocks: 198.145.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:aa:3f:d2:0f:e1:eb:18:f3:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=99a67570-5ceb-4ab6-808c-52a3e2ec5a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:8f:ca:ab:43:46:2a:51:df:87:3c:ba:ec:
12:b6:b4:9d:8d:69:35:65:2a:6e:61:c1:bd:a7:e0:
0b:d4:d0:51:63:94:8f:c6:2b:3c:0b:e8:ee:18:b8:
ce:ce:5c:da:e4:03:c2:4b:4e:1e:65:83:14:ce:d4:
4b:fb:9f:c7:10:1e:75:9b:32:a0:10:be:d7:7f:56:
26:e8:b8:97:c7:75:05:8e:89:4f:b5:34:b6:59:2c:
fe:da:4f:5a:31:3a:8a:14:d4:16:e5:da:e4:7e:2f:
e8:81:69:21:71:50:21:24:9a:92:23:90:6b:dc:31:
9b:d1:ed:d8:59:63:9a:2a:24:1e:19:8a:3a:42:fa:
19:d7:59:06:62:d4:99:c0:64:27:cb:b8:42:5e:11:
ee:10:28:55:7f:da:7d:10:46:09:59:36:c9:9d:fc:
19:3e:2d:5b:3f:8e:91:16:a7:e2:2e:0f:55:8f:4c:
58:0b:0d:46:a0:86:37:7d:4f:b9:93:da:5f:12:d4:
76:70:21:db:b4:a4:dc:c3:d5:4e:43:24:8e:49:2a:
ae:15:2d:10:4e:ff:15:8e:cb:01:28:2c:74:50:2e:
6b:77:19:cc:9d:da:f8:cb:07:7f:f2:06:2c:1a:0e:
ee:ff:95:0b:fa:e8:80:0d:f5:e6:a4:c8:aa:88:ab:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:46:A1:58:50:B1:9F:08:22:7E:3A:7C:64:EB:DD:5F:16:37:3B:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:48:9a:60:f4:78:a5:13:19:93:96:f5:76:15:7e:81:04:29:
5f:42:76:8a:32:3c:3f:f8:6a:48:7c:3e:7c:75:5f:8f:ac:a5:
5a:89:a7:67:45:55:6f:2f:a7:43:dd:d1:d5:bd:14:d0:e9:66:
b4:5b:22:1d:62:fe:50:72:cb:cc:02:ab:32:3b:a1:13:3f:02:
d8:fe:05:6f:a7:08:f2:b2:85:45:9d:7a:d8:10:d0:a0:ec:b6:
03:02:cc:ef:d2:ec:ae:fb:b0:55:aa:f3:c6:6c:aa:33:ed:9e:
df:49:67:0a:87:3a:c1:bf:36:47:aa:71:2a:7a:6f:dd:6c:36:
7a:8a:97:a7:9f:5c:f0:4a:10:3e:96:f2:21:02:95:8f:7c:99:
94:d7:bc:61:5e:10:7a:a1:e3:6f:f4:b7:ec:c8:f1:4e:17:6b:
0c:f7:2c:b3:e7:13:bc:ae:85:29:50:e7:b7:31:bb:db:03:ff:
e4:9a:ea:f0:7b:80:50:0e:87:76:ac:57:f9:6c:cf:c0:27:21:
c9:21:25:27:80:45:ac:8e:c1:ee:3f:0a:b4:77:de:14:a0:9f:
e1:a7:c3:ab:41:4b:98:a6:5e:22:71:53:a7:18:1c:09:ac:d5:
83:92:7e:59:e9:13:32:43:48:5f:09:2e:4d:82:23:c1:b2:1b:
94:91:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:52 2025 by rpki-client