Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/9374fc80-4a9f-3748-ae59-aa2669358128.roa
File: 9374fc80-4a9f-3748-ae59-aa2669358128.roa (raw, json)
Hash identifier: 24lDCON0QgoIqrsAla5egDqircMCsbf6YnNTqkUq8xs=
Subject key identifier: A6:63:C8:AC:71:01:58:C4:0A:D3:88:92:02:0B:53:60:A8:32:9C:B6
Certificate issuer: /CN=98c27bef-79eb-4153-b064-e68d263b6ae3
Certificate serial: 010D0C9F432858492A9F02C4D7C7F25C5F87F840
Authority key identifier: A1:93:B3:16:A4:B7:75:34:E9:B0:F2:5B:7C:D6:96:E5:10:64:C3:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/9374fc80-4a9f-3748-ae59-aa2669358128.roa
Signing time: Wed 12 Mar 2025 19:18:10 +0000
ROA not before: Wed 12 Mar 2025 19:18:10 +0000
ROA not after: Tue 10 Jun 2025 19:18:10 +0000
asID: 400288
IP address blocks: 128.254.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2a:9f:02:c4:d7:c7:f2:5c:5f:87:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c27bef-79eb-4153-b064-e68d263b6ae3
Validity
Not Before: Mar 12 19:18:10 2025 GMT
Not After : Jun 10 19:18:10 2025 GMT
Subject: CN=a1720cc8-df46-4304-8d6c-de9d4f941517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:5a:8d:d1:b8:b4:d0:e1:48:de:a4:4a:c6:
aa:03:0f:99:37:fe:39:8b:bc:6a:7e:ef:60:91:d3:
ba:a3:45:8d:d4:06:0d:7a:0f:f9:2d:84:e8:59:cc:
8e:9c:2c:fd:c9:db:5e:59:b7:ac:54:70:2c:11:94:
21:d5:ab:86:8b:e6:2c:fd:0f:94:cb:a9:a9:87:72:
42:57:00:86:e1:30:d7:09:ce:ce:1e:d1:e4:08:93:
11:a2:65:23:09:04:a9:f7:2e:96:cc:b3:86:f9:39:
a9:04:8e:67:f1:e8:b4:3d:e6:fb:64:15:f2:49:94:
f4:e4:41:88:5f:c8:d5:e3:74:d8:ae:44:51:de:f4:
02:85:8c:83:ac:5d:67:46:2c:2a:3c:b1:79:2a:9e:
2b:80:9f:6d:69:a6:83:22:cd:f6:c0:a6:19:56:d8:
ee:e0:e0:66:98:a7:6f:21:61:b6:0d:76:d2:9f:59:
ec:95:6e:bb:28:0c:e8:d0:2e:43:8f:1e:8a:1a:8a:
d8:24:08:25:4b:75:0d:5d:06:6a:a7:82:ad:b5:19:
5b:67:19:34:e5:fd:3d:79:70:a6:63:82:30:80:9f:
5e:b5:12:6f:a1:47:d1:00:51:7f:ae:6e:1c:bf:fd:
32:07:a2:7b:5b:04:dd:64:5c:fa:ac:19:a7:a0:74:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:C8:AC:71:01:58:C4:0A:D3:88:92:02:0B:53:60:A8:32:9C:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/9374fc80-4a9f-3748-ae59-aa2669358128.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/98c27bef-79eb-4153-b064-e68d263b6ae3.crl
X509v3 Authority Key Identifier:
keyid:A1:93:B3:16:A4:B7:75:34:E9:B0:F2:5B:7C:D6:96:E5:10:64:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:99:c0:18:8a:e1:dd:e9:d9:fd:3d:e3:c1:83:86:fa:5c:eb:
11:59:06:f6:d7:09:f8:48:13:c6:d5:c8:ed:f1:02:12:26:b0:
3f:09:da:ca:91:3a:82:47:1f:d8:07:f9:83:ad:4e:5b:d1:7f:
d5:c5:83:df:03:4d:90:7f:69:8e:95:d1:ba:37:39:6b:43:8f:
01:15:08:fc:40:d0:86:16:de:e9:7b:bc:97:eb:86:75:9e:35:
5a:3a:84:13:64:ef:97:00:45:b5:e3:66:4a:f7:56:25:e6:f5:
df:89:d9:90:ca:94:55:de:15:c3:2f:84:45:e0:13:1d:d4:f3:
06:a0:6a:8e:9e:74:70:b6:43:da:3e:bd:ff:89:60:38:28:9e:
94:2c:39:d4:80:9b:b9:a6:5d:01:60:e1:2b:2d:ad:35:e1:57:
d3:8d:cd:dd:99:bd:99:df:08:f9:8a:5f:2c:0a:70:d5:b3:ed:
45:e1:a6:38:ad:94:e9:fb:2e:9a:dc:6d:50:ab:b2:08:e6:8b:
56:69:5c:32:73:30:86:39:ae:8c:75:91:f5:83:fe:bc:33:2b:
c1:57:4d:0c:7f:47:da:e0:1f:ca:a3:46:57:5c:f8:f5:4d:0d:
8d:9d:dd:14:fc:99:90:59:7b:a0:47:dc:5d:7c:64:61:fc:e9:
5b:c9:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:41 2025 by rpki-client