Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa
File: dded8e61-2654-367c-8bf2-b7c820c106cc.roa (raw, json)
Hash identifier: A3227GEQs3Xc9mmT/UfsxRZ+RFN2Z2GP8lejiCXxko8=
Subject key identifier: B8:DA:42:CD:1E:76:5F:28:F4:ED:A7:41:41:4E:DB:9C:31:DC:39:63
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F43285848C6E62EC0C14C2015DC78EA30
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 16433
IP address blocks: 198.89.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:2e:c0:c1:4c:20:15:dc:78:ea:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=464c7142-feea-4ad1-9c53-ad36976c0529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:79:f1:29:c0:85:4c:d7:a2:97:1f:3a:b8:
4d:9d:e8:fe:f7:ea:ef:7c:49:d8:ce:b7:06:c8:63:
0d:24:4f:b8:a4:30:fc:79:83:00:d5:ea:fb:05:bd:
2b:74:1f:15:9e:38:43:2f:2c:2a:b8:db:02:fa:a7:
02:f6:d7:10:d9:a1:79:df:b8:b2:23:13:94:33:19:
88:a1:c1:0e:ff:96:9c:46:ad:10:02:dd:78:27:a8:
fa:62:e5:ab:ea:05:73:16:3e:20:1d:1f:8b:a6:79:
b7:3f:e7:01:75:b2:e1:c5:b6:1d:ca:68:70:01:2d:
3f:58:3f:9c:ce:78:c6:ba:8c:fb:74:0d:6c:d9:1c:
57:5f:30:0e:3c:01:22:53:dc:86:7e:8c:5d:42:0f:
7d:b3:42:72:ea:1d:b5:38:99:4f:68:16:5f:fc:8d:
69:50:89:3d:92:6c:fb:9b:43:c8:58:95:cd:90:bc:
a6:93:78:5e:d5:8f:75:ba:a5:47:08:5d:38:d0:4d:
54:d3:aa:a2:67:92:1d:9d:49:9f:6c:1c:b5:09:ea:
6e:42:24:a3:ff:13:97:ba:89:80:5b:6e:da:f1:ee:
d0:84:8d:7b:11:2f:e3:9b:9c:a2:f6:83:f4:24:33:
3e:bc:e3:df:94:af:1a:b8:0c:4b:97:ee:b3:97:12:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DA:42:CD:1E:76:5F:28:F4:ED:A7:41:41:4E:DB:9C:31:DC:39:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
198.89.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:7f:cb:4d:2c:dc:9c:55:d0:97:ed:7a:75:7d:1e:cf:38:62:
08:dd:5e:bb:e7:0a:33:3c:f9:73:bd:88:73:73:9f:b7:57:4f:
a3:b1:1c:45:1b:4e:04:02:0e:9f:fd:2a:d1:0a:46:16:ab:ae:
24:2d:ad:e8:95:ef:4a:af:8f:d8:3c:a9:43:71:64:fb:ae:cf:
7d:90:da:8f:c2:a2:a1:5c:db:0a:a8:46:cb:64:cd:ce:df:e5:
ac:fd:66:dd:a6:d1:b0:9b:9b:76:5b:17:59:70:e1:7a:e7:4a:
76:25:33:f6:dc:b8:47:c9:fa:c6:29:6b:3c:47:a3:b9:9e:98:
12:e4:e5:3d:77:a9:bc:e6:c8:bf:69:a6:ab:74:0e:6d:73:dc:
ab:34:17:14:5e:39:15:b0:50:02:79:cc:ce:30:a9:13:18:ab:
a1:8f:50:c2:50:a4:b4:d3:0a:57:4c:25:69:a7:e1:39:e2:d0:
5d:ac:25:ce:1b:2a:b2:42:dd:1e:56:f0:ea:a3:a5:a6:1a:f5:
bc:6c:6b:43:4c:be:34:34:00:41:69:0e:b2:fb:7a:ec:08:3e:
b1:1a:e5:5d:e8:7d:3b:f9:62:cd:45:b1:6b:02:01:21:84:4d:
18:1a:44:56:1a:9f:ae:a1:d3:e8:6b:01:4f:62:25:3a:1e:a5:
72:1f:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:58 2025 by rpki-client