Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa
File: ff08339d-585d-3340-b3f1-2b16c2469a4a.roa (raw, json)
Hash identifier: jlAvmuSgbu4VlSvnKuIkW14SYFVudC3FIa5Zx3x+82I=
Subject key identifier: 7D:CA:25:B1:66:74:41:04:8C:5F:DF:C2:E4:EE:55:C6:0F:9D:F3:98
Certificate issuer: /CN=7486d668-0b59-485d-a30a-dbd53fab21fd
Certificate serial: 010D0C9F43285849194189AF6B171B155ECE8600
Authority key identifier: 6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 16668
IP address blocks: 198.202.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:89:af:6b:17:1b:15:5e:ce:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7486d668-0b59-485d-a30a-dbd53fab21fd
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=8ce15dcf-28e2-4bb7-a8cd-d8b1795216eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:8e:b3:c5:ca:75:8e:2c:95:3d:a7:66:cc:
91:55:d0:c8:7d:22:f4:3c:23:4f:f0:fc:6d:37:45:
24:28:e2:ab:d6:1e:03:24:df:8c:a8:ec:3d:82:e0:
4f:fe:c6:1f:e8:f3:83:ad:06:db:74:93:9e:a1:aa:
16:40:b7:f9:84:30:51:80:29:4b:cc:62:ba:9e:ff:
60:03:11:85:48:1b:76:17:fe:1a:e7:f2:e0:3a:a8:
4a:e5:6f:c4:53:42:f7:8c:84:c5:80:df:5c:2a:a3:
b0:c6:1c:98:a1:6b:f6:be:d2:60:41:ee:60:32:a5:
fe:8a:02:21:e5:fa:4b:bd:fa:40:fc:91:2a:7e:93:
ef:5d:52:b4:12:80:de:82:c3:d7:9d:c9:cf:99:a4:
48:e5:e2:89:66:d4:cb:18:92:b0:1d:38:72:05:03:
d9:c9:67:4a:e1:dd:c5:b1:0d:2b:94:04:76:58:23:
0e:90:a6:b4:0b:11:aa:86:4c:e6:1f:42:e5:cc:89:
bf:2f:95:8e:74:c0:6b:32:f6:02:59:30:6f:c5:8d:
74:22:52:98:ec:13:03:79:02:c2:f4:97:be:fc:a1:
5c:27:55:1d:00:dc:47:22:92:df:31:5f:e5:06:e4:
64:32:e5:0a:a5:01:04:5e:33:db:da:ee:fd:10:7f:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CA:25:B1:66:74:41:04:8C:5F:DF:C2:E4:EE:55:C6:0F:9D:F3:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.crl
X509v3 Authority Key Identifier:
keyid:6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer
sbgp-ipAddrBlock: critical
IPv4:
198.202.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:90:4a:0d:eb:38:fe:50:80:42:93:d0:89:ad:44:36:6a:f8:
85:73:c1:a5:d9:47:21:48:55:33:cc:c8:e8:fc:7d:60:fe:a1:
29:27:ab:41:54:26:f0:0d:5e:e9:72:3b:b1:84:50:41:df:d8:
e6:df:25:f0:83:86:2a:f8:b9:d3:7c:7c:44:27:0a:e6:43:bf:
6e:4c:f7:8f:45:29:4a:11:4f:23:14:73:5d:00:74:98:6d:95:
2d:c8:6d:eb:68:a7:39:d5:5f:52:8c:c7:b8:58:5f:58:df:b2:
3f:95:49:1f:18:ef:42:be:d2:0f:82:cd:42:0c:99:e8:3b:d3:
fd:14:8b:b9:8d:bb:2a:5d:22:13:93:96:77:77:c1:3e:16:01:
43:ee:fb:7a:3e:4b:91:32:20:8a:c5:7a:e4:8b:78:81:55:70:
f3:6a:cf:7e:e4:79:3a:2b:f9:99:e6:9f:20:3c:05:f8:c2:92:
eb:3f:28:d5:ed:bf:f2:43:c7:40:fe:bc:a9:72:5c:52:e1:fd:
89:d0:01:3a:3a:92:81:57:08:c5:14:3b:bc:2b:b6:8e:17:e6:
06:e0:63:db:d7:a0:e0:ea:90:52:7f:bb:47:80:d3:16:11:17:
11:a2:0e:5b:60:d3:f5:9a:91:70:3f:4a:a6:0c:79:c2:02:c4:
1b:23:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:12 2025 by rpki-client