Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/42e8aaf6-e160-3994-b12c-56f0221750e9.roa
File: 42e8aaf6-e160-3994-b12c-56f0221750e9.roa (raw, json)
Hash identifier: ssBu1mkv/v4hjp/hPn+ZW5BmA/xr7gt9DhA+kBaalCU=
Subject key identifier: FA:84:06:1C:AB:1D:8D:A6:BB:93:EF:32:9A:A8:31:77:4E:B8:C3:9D
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584897708DEA2E970F8B6F778100
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/42e8aaf6-e160-3994-b12c-56f0221750e9.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 16532
IP address blocks: 198.52.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:8d:ea:2e:97:0f:8b:6f:77:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=1f0bdbc8-bd30-4b51-a6d2-f9ebd0dc5f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:01:2e:65:15:8a:0a:14:f3:13:5f:4f:1b:
8e:90:57:cb:95:25:f9:49:cf:4e:9f:49:5d:50:c2:
12:9a:fe:37:b8:b5:6f:46:72:6d:e9:ff:76:d4:2d:
32:f0:f0:3e:ed:92:d8:2c:01:25:05:4f:3a:f6:eb:
32:65:cb:7a:42:8f:a6:5c:15:99:f8:77:62:55:18:
be:3f:2d:44:65:a6:32:9c:21:60:ca:6e:3d:8b:04:
96:cb:8a:38:04:93:cb:39:e6:ec:5c:46:a6:ce:fb:
e7:5d:46:09:af:9e:bc:06:8a:46:9d:5e:5d:16:20:
93:61:63:70:85:04:20:9f:7f:30:f2:50:38:95:93:
70:2b:ca:0c:a7:ce:9e:fc:19:c0:83:38:84:82:b6:
e9:01:48:1a:aa:ba:e2:d5:6c:ec:05:93:9f:c2:cf:
30:e5:8d:e0:c5:ea:9c:fb:84:d3:d9:3b:65:69:d9:
68:e7:44:95:01:32:05:11:b5:3b:ac:4a:33:5d:9f:
08:be:b7:b3:a1:90:57:67:9f:90:a4:49:bd:49:ec:
ef:1c:6b:03:c6:ff:c4:d7:a7:16:69:8c:b7:09:d7:
92:7e:11:c8:58:9f:6f:78:41:be:18:ad:7c:bf:d1:
b1:7e:54:ba:ec:97:c3:60:16:36:6d:f4:8b:4b:50:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:06:1C:AB:1D:8D:A6:BB:93:EF:32:9A:A8:31:77:4E:B8:C3:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/42e8aaf6-e160-3994-b12c-56f0221750e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
198.52.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:dc:33:7b:18:2c:77:52:e8:f4:13:92:b3:ae:b2:3b:b0:f2:
40:a1:fa:f9:9d:e9:05:5f:e4:71:3c:00:88:c0:8f:61:62:c7:
59:f1:35:37:09:cf:8f:51:7a:0b:43:90:ac:d6:9c:1b:42:3c:
3b:2f:5c:05:1c:80:c1:b6:de:58:c2:b6:f6:25:17:50:de:8a:
a1:e9:8a:9f:cc:b1:ad:c2:e9:35:ed:22:28:98:83:30:7b:8f:
c9:cb:05:5e:24:a3:c8:e8:c1:e6:ca:7e:7d:25:eb:81:ab:95:
6c:2e:3c:55:fa:37:92:4f:c4:e8:0c:ac:bf:94:cd:90:9e:f0:
4b:0a:43:7d:78:4e:fb:21:b2:81:98:f1:dd:94:f3:ff:38:45:
c2:ea:81:8a:ab:64:8f:54:7d:aa:b8:51:11:c8:fb:56:e6:cc:
6b:dd:61:67:51:32:19:ac:37:3b:f1:2c:4f:45:03:f2:8e:2d:
cf:c6:15:f5:9d:6b:82:7f:42:fd:22:2a:18:a0:1b:74:6f:c9:
79:95:c9:79:45:57:85:dd:5c:d6:90:d8:ad:07:ed:97:7c:48:
2a:db:90:12:3e:47:85:ab:e0:0d:b9:ee:59:d3:2e:78:97:f0:
d3:97:a7:bc:f3:d1:a7:ab:23:11:6d:a6:ce:57:87:d6:31:81:
e9:ec:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:37 2025 by rpki-client