Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa
File: 2bdf5da3-7278-3180-9d5c-727f67919ebc.roa (raw, json)
Hash identifier: Nq3FJhFGorvONnTQKgizUVnfjfpXXQJMOHsCyk/8hKU=
Subject key identifier: 18:31:EA:DE:BE:51:8A:F9:9D:CA:16:3B:D8:C2:06:95:C5:09:F8:2B
Certificate issuer: /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
Certificate serial: 010D0C9F432858491ED6E9469A139738D12FA980
Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 13631
IP address blocks: 198.22.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e9:46:9a:13:97:38:d1:2f:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=d262a23b-204a-42f9-ae5c-42bf7b08e7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:fc:4f:20:57:f9:80:df:1c:60:61:4c:b6:
c3:10:37:6d:35:8f:5c:ee:84:df:af:e9:6e:47:13:
d2:7c:be:ac:a0:29:39:6d:b5:e2:47:2f:06:ba:20:
e1:b0:f0:6e:47:60:85:0b:18:0f:eb:5a:09:da:bb:
c9:ba:99:58:34:b3:df:cf:bc:21:cb:5b:3e:f8:37:
e3:2c:2c:e5:c4:dd:a4:5c:29:46:24:43:17:dd:d2:
18:11:26:3d:c3:d5:29:a4:59:55:8d:72:e0:4d:8d:
61:ed:f8:05:26:02:34:95:47:e1:d4:54:68:02:36:
b3:c7:74:8e:e7:bb:34:29:88:40:d7:30:c5:ef:a5:
56:0c:09:51:ae:fe:d6:04:7c:10:a6:db:5e:64:86:
27:2b:d3:d5:6f:5d:07:d9:20:77:d9:f1:de:93:a1:
b6:dd:af:90:5b:1a:82:e3:12:1d:9e:2b:da:44:55:
21:5e:05:11:42:5c:c1:e8:e2:da:e8:05:c5:71:2c:
19:a5:6b:a9:6d:9c:87:24:e4:ac:25:0a:52:4f:f9:
26:3d:b5:75:bc:8f:5f:60:99:0e:69:97:8a:7d:7c:
c5:43:f1:b1:ec:9f:02:00:ab:fa:7d:f6:2c:c6:d4:
aa:97:f1:06:ef:55:e9:fb:03:6b:57:02:29:40:24:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:31:EA:DE:BE:51:8A:F9:9D:CA:16:3B:D8:C2:06:95:C5:09:F8:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl
X509v3 Authority Key Identifier:
keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.22.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:cb:d7:8e:dd:29:5e:a3:41:36:12:9d:bd:59:4e:e4:fa:b1:
ec:37:e1:85:c1:77:5e:84:96:af:56:82:97:95:9d:c8:83:e1:
76:39:84:17:72:20:49:5b:71:3a:24:2d:bd:c8:9a:e0:35:0c:
23:0a:d5:44:6a:5f:04:6b:da:d9:f0:0a:29:33:79:d2:1f:31:
29:b0:01:d0:ab:91:07:03:86:35:94:61:ff:ef:aa:81:a3:22:
3b:f7:54:b9:ff:05:5e:f8:5d:23:0b:81:88:3e:23:88:38:8e:
d0:3b:64:bd:56:01:dd:59:f8:65:c4:11:c2:f6:48:d6:ee:7a:
a5:ed:c2:f5:6d:84:6b:a6:6d:71:f0:42:6b:3c:4f:9a:4f:55:
83:28:ba:e1:3d:00:b3:78:43:5d:1a:03:66:d9:d7:79:ec:ff:
6b:95:cc:5a:de:4d:8a:b9:9a:4f:2a:e5:88:76:73:c9:51:64:
27:5e:aa:3e:7a:01:64:f4:fb:4f:f2:f2:fd:6e:d1:b3:2a:24:
04:c2:3b:7f:e0:29:9c:7c:4e:f3:18:e9:b7:c2:35:fc:d8:ae:
ab:ad:23:dd:d1:5f:fa:29:19:c0:dc:3e:34:2b:5c:ac:cb:c3:
ab:92:f7:a5:70:2b:e0:77:5f:ff:29:ab:68:71:e1:85:c3:74:
6a:fa:4e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:20:52 2025 by rpki-client