Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa
File: e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa (raw, json)
Hash identifier: Y8LhD4qtiEE1gS5i+gTz8esc1RQdXU1Mj/C82yfV1bw=
Subject key identifier: E8:4D:2B:8F:EB:D7:06:2F:83:E0:D9:B0:5E:A9:84:88:5F:4B:E8:54
Certificate issuer: /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Certificate serial: 010D0C9F43285848E16BD4BAB44019A0F5B43480
Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 62827
IP address blocks: 158.51.232.0/22 maxlen: 22
198.17.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:d4:ba:b4:40:19:a0:f5:b4:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=fe750ad6-76d0-4c43-abca-91461158c589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:96:db:63:2a:e8:10:b5:42:4c:0c:88:48:
4e:4a:36:24:e3:b5:0e:9a:b9:ff:bf:c1:c0:e3:a3:
60:94:cf:1d:87:f7:eb:81:65:f5:63:db:9a:10:98:
19:f0:c5:d4:a1:63:82:c5:8e:72:40:6a:0d:33:88:
25:8f:8f:8b:ce:30:21:e4:9e:1a:62:79:7e:0f:c0:
30:f1:d3:04:e2:1e:ef:5d:fc:77:f6:f7:10:a6:6d:
db:6b:c4:c5:8f:03:04:b2:3d:04:b4:a4:b5:30:26:
7d:c0:94:0d:bc:d4:8c:67:bc:32:ca:f4:41:dc:c4:
c6:a2:e6:f1:3b:06:a7:d8:3e:5a:5a:2b:3c:7b:b7:
04:a9:d2:0b:c0:09:f4:40:ea:53:ad:bf:82:24:da:
06:ac:7a:0e:e1:d1:7f:33:9a:83:bc:e6:b8:6c:88:
6d:f4:da:e8:57:f5:84:0b:c8:39:f6:e5:9a:78:8b:
64:33:b4:67:71:e6:80:8f:35:f9:a7:45:db:f5:5a:
52:d9:94:cb:3f:80:b8:38:2b:93:84:fc:d7:3d:cf:
1c:35:78:c3:aa:a5:aa:2e:c3:cd:88:c1:dd:30:f6:
64:9f:0f:e1:f2:55:54:e6:63:9d:62:4a:a3:53:0c:
cb:7c:a1:70:4f:aa:40:59:43:f9:68:e4:02:92:de:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:2B:8F:EB:D7:06:2F:83:E0:D9:B0:5E:A9:84:88:5F:4B:E8:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl
X509v3 Authority Key Identifier:
keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.232.0/22
198.17.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:86:2d:6b:85:0f:4a:2b:e0:c1:ab:70:0c:2b:b0:a2:e7:c0:
69:a5:3f:99:36:3f:97:bd:c7:a3:bf:0e:91:ae:6f:42:d6:b1:
c9:e2:7a:00:01:f5:01:15:84:33:55:d4:5a:e7:d0:9c:b0:1d:
91:aa:9d:19:d2:15:9f:b1:ff:fb:c2:89:4f:9f:16:c9:fe:2e:
eb:7f:f4:f1:d0:29:02:6e:0d:d7:42:67:db:fd:ad:b3:c4:c8:
db:6f:6c:7f:70:3a:c1:99:64:ad:e4:12:69:d5:93:36:81:d7:
6f:80:89:71:3a:ce:17:20:a6:e2:3c:10:0d:71:6c:2f:c2:d1:
3b:82:da:d8:e3:f0:cf:03:77:b3:6f:2d:4c:c9:4f:0f:0f:09:
ec:77:0b:63:09:d2:7d:90:29:7f:72:2c:bd:e6:94:12:da:fc:
c7:15:99:36:42:cd:10:ef:4c:5c:c7:8d:2f:7e:f3:33:9e:3b:
12:87:fc:22:96:41:db:4b:ca:26:0e:4c:75:cb:8b:80:ed:c3:
b7:30:a3:14:bf:ae:3e:5d:1b:5a:0f:02:4e:3f:9e:21:9e:88:
12:62:ee:d0:34:77:de:62:a3:f3:ff:3a:bc:b0:54:8f:9e:bd:
3c:0b:59:85:de:fb:85:6a:ac:45:e6:ed:0a:cb:7b:b4:62:c7:
a7:86:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:33 2025 by rpki-client