Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/33a67707-c871-3f7e-a7ae-f2f4d1c8ce9e.roa
File: 33a67707-c871-3f7e-a7ae-f2f4d1c8ce9e.roa (raw, json)
Hash identifier: nCzr+QoPn/VHZHKFvNOxd1JA/SIPP7ao0ytV/QfQm9g=
Subject key identifier: 78:F8:3C:79:B4:24:A0:F5:9D:EA:3C:B4:6B:2D:52:B9:19:2C:4F:A5
Certificate issuer: /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial: 010D0C9F43285848B4C0CF55D104693B58289F00
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/33a67707-c871-3f7e-a7ae-f2f4d1c8ce9e.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 26042
IP address blocks: 172.98.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:cf:55:d1:04:69:3b:58:28:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=da211027-9353-41b3-973e-6d1c222f4518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:7f:f5:c4:18:c4:5d:a4:f1:5f:76:a3:dc:
fa:b5:d2:fe:d5:c9:70:fe:5e:11:89:8e:e7:ad:00:
f7:b5:7d:0d:aa:b7:49:52:d4:60:a3:9d:fc:9f:cc:
31:bd:69:7b:4c:4c:21:35:90:39:6c:c1:6d:ca:1e:
e9:18:b1:25:69:7e:d4:b6:6f:8f:ee:22:9c:3f:59:
8c:aa:15:a1:b2:f2:1e:89:f9:a4:7f:ef:4c:b0:b5:
61:e2:3d:33:70:6a:07:36:4c:bd:8e:88:56:bf:be:
8e:16:f2:73:b1:3a:cb:4c:b8:74:04:ec:af:8d:23:
dd:e9:91:83:ce:19:77:c2:00:e0:2a:a8:3f:24:d0:
0a:b6:b3:26:84:ae:ee:84:1d:16:1d:a5:4b:15:2e:
4f:02:7c:b6:b9:43:9a:ee:25:75:14:9f:54:d0:ef:
1c:73:b2:fd:30:34:e7:36:46:5f:c1:39:e6:e1:6f:
60:6e:3a:9f:84:5d:dc:d2:b6:cb:6c:76:93:00:f8:
7e:29:41:be:f2:a4:99:e3:bf:1c:34:d9:0c:e7:88:
bf:f7:46:e0:53:63:d9:f5:c0:10:97:d9:db:3b:ca:
2f:60:91:46:98:46:77:77:4c:28:9f:73:50:bc:0c:
99:8a:c2:b0:8a:5c:81:31:8f:18:07:df:3b:89:7a:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:3C:79:B4:24:A0:F5:9D:EA:3C:B4:6B:2D:52:B9:19:2C:4F:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/33a67707-c871-3f7e-a7ae-f2f4d1c8ce9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
X509v3 Authority Key Identifier:
keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:1c:6c:5c:ce:42:81:c7:28:8a:c5:ec:ad:d2:7f:07:64:22:
68:d9:55:b7:5c:67:6f:b1:f4:2c:4e:2f:bb:5b:82:c8:41:df:
17:fd:1c:e6:bf:75:eb:09:cc:77:5c:ea:63:4e:54:13:74:59:
fe:11:6b:cd:72:bd:67:5c:a5:fb:39:e3:da:83:ef:ff:fe:df:
2a:d0:a4:9a:5f:35:ae:79:32:b0:73:c0:f4:f8:d4:ad:21:bb:
14:61:77:40:a2:3e:ea:85:ea:9b:99:bc:1b:70:a7:85:d3:50:
23:1e:90:8b:61:6c:2e:31:78:cc:e9:3d:4a:c9:0e:a2:69:35:
de:3b:dc:61:28:0d:f4:81:65:6e:bb:bc:bd:ca:da:ae:e7:41:
b7:a9:6e:06:d1:79:db:8b:15:55:f1:6a:c4:05:0d:75:55:19:
67:45:75:a3:b1:26:3e:f8:4c:5d:94:12:f0:11:6a:05:93:2b:
8a:51:85:d0:20:a1:44:75:06:9c:c7:3a:69:85:52:3a:1d:1c:
a8:59:ed:55:fc:eb:f3:8d:94:56:67:52:8c:f8:93:cb:80:5d:
2c:1d:5a:c8:35:d9:49:eb:1b:da:f5:cf:f5:fa:19:f3:9e:ba:
8c:e4:96:bd:66:97:6f:f0:61:d9:a0:cb:95:93:03:9b:22:96:
43:f5:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:55 2025 by rpki-client