Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa
File: e6160c10-b008-3fd8-8017-49e70935a60f.roa (raw, json)
Hash identifier: 325wQk+EgMah/5uzjsJUE/rw0HZzGtt1OwPRoTe3gnI=
Subject key identifier: E8:3F:BE:36:1F:89:24:6F:DE:E1:22:FC:6A:74:2C:51:70:31:A7:08
Certificate issuer: /CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216
Certificate serial: 010D0C9F43285848F65BD194F9C6C77447B87800
Authority key identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 14618
IP address blocks: 198.99.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d1:94:f9:c6:c7:74:47:b8:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=96a1bced-c3f1-4f95-b7ed-30172ed8b5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:05:ac:79:34:c4:22:8c:df:1d:9b:68:31:
01:11:c1:49:28:eb:86:83:f6:eb:4c:0e:79:ae:3c:
f2:e6:f2:98:62:51:2b:19:3f:61:ca:f8:ec:17:1a:
00:3e:c8:ee:83:f0:91:55:56:be:5c:34:95:f5:c3:
82:d9:df:ea:b1:b8:8c:76:61:b1:ea:2b:39:97:3c:
10:68:9c:97:3c:12:56:7d:27:20:a8:d5:9a:d8:5e:
da:54:a0:29:07:20:8e:44:ae:e9:e2:30:b3:72:0b:
b5:7f:96:bb:ad:51:27:77:ad:bf:66:81:e9:09:90:
52:32:a1:38:d7:0b:2b:5a:42:6a:cc:be:2a:60:e4:
24:bb:db:91:ac:5b:c0:25:3b:b3:6e:91:e1:f8:c3:
75:3d:71:c5:24:28:df:16:c7:ea:43:12:ac:8e:6c:
3e:53:1c:13:84:b5:cf:b9:97:39:9b:d0:15:e3:60:
e9:39:35:24:8e:d6:50:1a:7a:75:8e:51:cc:96:81:
e8:ec:78:ac:76:56:56:01:c4:99:e4:85:f6:82:f4:
a5:30:17:a1:71:15:76:fe:80:6e:80:40:c9:b0:63:
b6:6c:8c:d2:ef:16:4a:b4:cb:3f:5c:ce:a3:07:4a:
2e:73:1b:c9:fc:d7:58:77:b4:95:a0:bf:cc:48:7b:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:BE:36:1F:89:24:6F:DE:E1:22:FC:6A:74:2C:51:70:31:A7:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl
X509v3 Authority Key Identifier:
keyid:F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:7b:3e:7b:fa:3c:93:d7:fa:75:fe:40:66:7b:72:47:4e:97:
a1:04:9c:ec:80:53:88:d5:22:c4:94:9d:80:f9:a3:d2:6e:ed:
a3:ad:27:a1:19:07:4f:a7:bf:bc:ad:05:b9:40:ee:3f:72:00:
ea:51:ab:73:6b:82:50:0f:e6:03:b8:a3:30:3f:43:ed:3b:9b:
e3:19:bd:6e:ba:7e:31:b4:73:34:fe:76:6e:18:8b:e1:d6:d2:
60:9b:92:02:d8:7e:9b:8c:1b:71:a4:cc:9c:77:e6:9b:81:4e:
1d:a0:92:d9:35:7d:bd:a8:c3:b6:20:a6:f9:e5:0f:2d:28:c1:
73:f6:4c:88:50:7f:b1:81:67:a6:c8:7b:80:5e:3d:39:9a:6a:
3f:c3:b6:52:61:36:da:89:0b:2e:b8:5f:12:2d:e6:ed:8c:6b:
60:c6:20:c6:9a:66:b3:77:bc:43:8f:32:30:e3:9c:7c:fc:77:
e9:16:37:e8:00:19:0f:b7:7d:2a:fb:22:29:0d:28:68:11:fb:
5d:0c:0e:db:e4:3d:65:eb:14:c3:82:c5:61:38:ed:33:be:2c:
6c:aa:03:e3:7f:9c:bc:58:17:06:d4:c8:e2:da:fa:af:5b:0c:
45:6b:22:a1:b4:78:e0:0f:77:b1:d5:a7:4e:55:25:a4:31:07:
4b:d0:66:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:34:10 2025 by rpki-client