Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa
File: 5ff297e9-0b93-336f-a807-5fd81fc10453.roa (raw, json)
Hash identifier: 84mrzzbs9YGSkrt8MKgKGFcMy4yCOk+V0TDjB8vhNiU=
Subject key identifier: B2:9B:E8:A5:12:59:58:9A:95:EF:7E:3D:BC:78:B4:22:6E:AB:B2:E0
Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial: 010D0C9F432858487A2F014E447775C5F5A01780
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa
Signing time: Wed 08 Jan 2025 14:30:13 +0000
ROA not before: Wed 08 Jan 2025 14:30:13 +0000
ROA not after: Tue 08 Apr 2025 13:30:13 +0000
asID: 40788
IP address blocks: 198.2.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:2f:01:4e:44:77:75:c5:f5:a0:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Validity
Not Before: Jan 8 14:30:13 2025 GMT
Not After : Apr 8 13:30:13 2025 GMT
Subject: CN=9b4a9b88-8917-4fce-b47b-33bd8f434b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:d7:7c:ad:5a:42:ec:f8:b5:07:fb:12:18:
f8:a0:82:df:bb:e5:e4:6c:c0:c4:5c:cd:6c:bd:da:
b1:8c:e5:00:fc:aa:b5:e9:7c:1a:05:66:31:c5:ee:
05:19:3c:b4:c4:63:d9:fa:2f:e7:42:75:2a:df:f1:
44:70:77:5e:96:af:ee:98:ba:1e:87:5a:7d:c6:ec:
c6:9e:d0:8f:06:87:b0:3c:56:4e:45:db:a0:40:c3:
f3:e9:50:f2:2b:08:a9:e3:f2:08:1a:bc:cc:d1:38:
20:18:db:76:d6:7a:5d:5f:13:db:16:e3:18:c3:62:
ad:30:12:bc:53:9e:7f:a3:84:a0:64:6e:a4:98:e1:
16:82:2d:ea:98:70:91:41:e3:ad:23:8a:65:92:57:
eb:02:32:2b:b4:eb:9a:d1:d8:9e:a0:15:89:18:41:
be:c5:e1:4a:f6:b7:49:b6:25:4f:09:28:1b:64:42:
96:05:2f:6d:bb:16:5b:50:75:01:6d:8e:d6:27:b0:
9b:72:06:ea:17:8a:8a:18:9b:2d:29:ee:a6:2d:82:
94:5e:63:a7:76:49:1a:d3:6f:47:89:55:83:48:3c:
26:17:37:80:3d:91:3f:a8:72:a8:ef:25:4c:94:5f:
96:ac:a9:80:73:10:a8:43:f0:e8:47:ee:4a:fc:fb:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9B:E8:A5:12:59:58:9A:95:EF:7E:3D:BC:78:B4:22:6E:AB:B2:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
X509v3 Authority Key Identifier:
keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
sbgp-ipAddrBlock: critical
IPv4:
198.2.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:0a:af:cd:6c:21:99:ca:0b:0e:01:c6:56:e8:2a:a2:d3:c1:
75:e7:90:e6:48:ed:83:b9:a2:ea:55:9d:9c:35:3c:a3:09:93:
ee:9a:4e:89:99:3b:bb:48:39:f2:67:76:84:fd:38:86:54:e2:
18:cb:0e:27:a1:e0:1f:d6:58:6c:74:01:88:6b:e7:18:d8:da:
59:f7:a8:ca:7d:5b:0b:1f:87:1b:93:6d:e6:99:77:84:ec:c5:
55:99:6b:5a:8f:d0:cd:d7:85:ea:a0:2e:32:de:95:c8:47:a8:
80:94:23:9d:56:77:bc:4a:f5:b4:ad:b9:ef:bb:d3:44:66:0e:
a6:71:9b:28:72:af:26:05:a2:05:bf:ec:cc:70:5f:6b:aa:ac:
64:41:f8:31:6c:a1:8f:4c:93:ec:93:eb:1c:28:a3:dd:8f:01:
50:2c:c9:b8:5d:90:d1:e4:62:2e:43:ee:60:76:06:a7:2c:cc:
78:64:c4:b3:87:13:26:ad:9c:bf:42:5b:d3:ef:91:6e:40:06:
d7:d5:77:74:25:dd:db:13:3f:bd:ea:fa:a6:2b:66:e3:15:f8:
c8:56:60:d4:37:b1:f1:d7:25:12:d6:07:89:3a:99:da:69:25:
74:b3:52:41:13:37:7c:d3:ce:60:b9:8f:6c:88:ef:13:72:cc:
5b:ea:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:31:28 2025 by rpki-client