Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c9aa6944-cbe0-3964-b0bc-d4d286f71ad3.roa
File: c9aa6944-cbe0-3964-b0bc-d4d286f71ad3.roa (raw, json)
Hash identifier: tx5/9xlShnQZBKgHZpMyCVxTdLCk1KisTV8bz2r7xMg=
Subject key identifier: D2:0A:DA:B7:92:89:34:06:E8:29:43:0C:2B:C3:A1:AC:A1:05:68:66
Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial: 010D0C9F43285848AF2B84FE9C2E99A70F4F8100
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c9aa6944-cbe0-3964-b0bc-d4d286f71ad3.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 291
IP address blocks: 198.124.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:84:fe:9c:2e:99:a7:0f:4f:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=dbb4b80e-a09c-4891-bb8a-0ddecdbc65d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:da:9a:7a:3f:e5:be:e2:4d:57:af:b6:b7:
af:a4:58:79:23:99:ec:82:03:ae:39:27:52:d1:7e:
29:fc:b5:72:df:a0:3d:20:fe:66:2a:bf:8a:e1:db:
a5:6b:e5:ee:0b:58:a4:80:2b:4e:d5:54:53:6e:4b:
a1:be:93:52:47:3f:c2:74:22:6a:c9:80:f5:8a:4a:
22:ac:17:c5:03:54:bd:fc:96:26:30:89:4b:0e:8e:
60:7a:fd:b0:9b:53:8e:6c:5e:7c:03:e5:df:c6:f8:
d9:7d:5f:78:4e:09:2a:ad:91:b8:84:64:6e:c3:0a:
a8:e3:de:dd:84:17:33:58:41:ef:9e:62:96:7e:2b:
00:e1:b4:b5:56:a0:b0:82:3b:d9:c7:3c:57:80:06:
37:6b:6d:31:e7:01:cc:76:6b:19:25:79:ca:1a:d6:
6e:86:88:13:c4:a4:15:68:fe:48:c7:d3:cd:c7:bc:
fb:0d:b3:65:a3:24:25:04:02:3e:bc:8c:dd:a0:87:
93:ad:58:88:87:02:90:68:c4:d4:f5:46:3a:46:a0:
87:36:a4:99:74:20:bf:45:06:96:01:17:b0:ff:df:
55:e9:56:ed:16:1f:fd:50:ee:ec:02:56:b3:ca:5c:
4e:2b:ea:fa:de:4e:4c:c9:a1:cb:98:82:2d:43:2f:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:DA:B7:92:89:34:06:E8:29:43:0C:2B:C3:A1:AC:A1:05:68:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c9aa6944-cbe0-3964-b0bc-d4d286f71ad3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
X509v3 Authority Key Identifier:
keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.124.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:b4:65:39:a9:61:18:f8:c4:b5:83:e3:33:f3:b8:07:96:ad:
d0:20:c1:7a:58:2e:c5:bb:cd:ad:ec:86:78:21:52:d2:bb:cb:
b6:e0:d8:64:a0:5f:b0:14:33:ec:0d:0e:52:e7:c8:cb:0f:d6:
ba:69:3d:10:70:50:8a:95:5e:cc:2e:21:af:e9:9c:e2:61:07:
99:cd:e1:49:77:a0:84:56:0b:07:b4:05:f8:e7:f5:d8:7c:68:
bb:0a:ec:fe:0a:02:12:92:8d:30:62:11:77:5b:70:f0:23:7f:
89:46:1e:5e:a9:3e:90:10:67:76:50:4f:bc:fe:44:33:cf:d0:
15:7b:5d:28:fa:11:7d:90:13:d8:38:fe:b5:6d:72:df:25:c4:
4c:13:ab:4a:a4:51:69:18:d7:a2:96:27:71:54:80:7c:77:41:
bd:76:e6:eb:79:d9:e5:e3:20:d8:be:43:a2:03:e1:c7:b3:ca:
20:7e:74:44:0c:7f:77:a2:72:c7:78:38:3d:c8:a5:d5:a2:52:
a6:ce:76:6c:02:21:b1:5d:4b:47:23:cd:36:9b:89:c8:0f:6c:
b6:a6:9e:a2:d1:53:66:7e:e6:79:9e:92:5e:1b:dd:78:0a:34:
ac:83:69:40:a6:98:55:3e:9e:af:f1:fb:8c:85:a2:85:11:ac:
a1:ef:21:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:22:03 2025 by rpki-client