Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/455d1ec7-f5b9-3dd0-a6fe-f494b861af2f.roa
File: 455d1ec7-f5b9-3dd0-a6fe-f494b861af2f.roa (raw, json)
Hash identifier: B5B0PifAYUMZ5dkqAsgZc5Yi3pUOjzH4knVUUqPULlI=
Subject key identifier: A5:20:84:B8:18:DC:84:E6:DD:00:F4:FF:2E:6E:1F:95:CD:52:64:34
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F43285848A136154F4F6E686AC0480480
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/455d1ec7-f5b9-3dd0-a6fe-f494b861af2f.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 398317
IP address blocks: 198.52.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:15:4f:4f:6e:68:6a:c0:48:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=7e0e01a6-6413-4402-9859-907c6df91be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:9f:02:6f:d4:ac:4d:38:cf:27:7f:4d:32:
98:7d:59:eb:96:4f:98:49:e7:58:b0:85:df:cc:ec:
2e:a5:66:28:58:8f:9d:e3:03:34:de:8e:51:06:06:
b1:cb:c9:73:ae:2c:04:67:15:b6:ac:d2:ad:fa:b1:
36:c5:62:dd:26:a5:5c:2f:78:4d:0c:86:fa:05:4b:
1b:bb:49:62:84:75:57:c8:a3:06:80:5f:15:6a:f1:
8a:34:db:6f:39:8e:2d:ce:9f:6f:fc:7b:e2:45:3c:
18:d5:1b:b6:b4:dc:3b:e7:72:8e:24:35:86:66:41:
19:0a:33:4a:c3:48:86:cf:c6:98:a1:e5:c4:c1:ef:
a5:e4:24:e0:6f:4d:90:24:88:97:42:73:59:6e:7e:
ed:3b:49:c1:d4:eb:6e:9a:ad:f2:6c:8a:88:11:e3:
c2:91:a4:b1:6c:39:10:83:e9:25:ef:e6:c6:1d:87:
e8:6f:eb:cd:fb:7a:38:3c:31:60:0d:70:0a:22:cb:
96:e3:f8:83:75:57:6d:49:e7:ab:8d:ae:34:41:34:
54:ac:cb:e4:bc:5c:a9:e1:28:5a:db:90:31:48:e5:
cf:51:89:27:9c:83:7a:29:f6:5b:2b:d8:a1:23:95:
42:95:3a:5c:1b:9d:96:a0:e5:ca:e4:98:09:4d:f6:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:84:B8:18:DC:84:E6:DD:00:F4:FF:2E:6E:1F:95:CD:52:64:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/455d1ec7-f5b9-3dd0-a6fe-f494b861af2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.52.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:9a:7b:b7:64:6f:b6:41:5b:64:58:4e:da:34:6b:cf:57:fd:
69:19:6f:25:b3:a6:75:7e:85:8d:8b:41:99:81:04:2d:d0:f2:
fd:fc:e2:b9:3b:96:4b:ee:31:0a:1a:f5:df:98:02:fa:c6:68:
e6:b8:27:55:05:4b:99:2c:2e:77:4d:9b:4e:6f:76:71:df:0f:
2c:fe:c1:9e:bc:f2:ef:41:e2:d3:eb:01:ec:fc:d7:67:1b:cb:
d0:58:19:fe:92:d9:a6:64:0f:0e:67:92:3d:c0:6a:d2:35:c6:
25:fb:2b:02:82:87:2c:7d:15:ff:45:8f:31:ee:7b:1a:bd:73:
74:84:b7:fc:67:a7:df:6b:fb:db:b2:9a:4a:39:97:b2:96:83:
fc:2d:e2:81:36:2f:99:0f:b9:c8:38:30:f5:e3:6b:d9:ce:cf:
8c:e3:5b:b0:3d:96:52:95:af:4a:61:48:97:61:fb:93:28:01:
be:9b:04:2b:68:ae:63:60:c8:96:53:c5:92:a6:e2:d7:1d:57:
cb:07:84:9b:9d:c8:ee:56:d2:f4:7c:55:f7:a3:70:50:1b:8e:
ad:ae:d4:e1:60:37:15:bd:d3:1f:14:bc:b4:79:74:66:af:38:
2d:a3:da:f4:98:0d:06:84:5a:a0:8c:e4:53:2a:12:12:b7:43:
ab:1c:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:05 2025 by rpki-client