Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa
File: a3c31877-dad2-39b4-a7ef-2037f5489018.roa (raw, json)
Hash identifier: ATpgFLxsOBjBkuGinj4mTtkarl+/oTw1rE0xtVxwq8Q=
Subject key identifier: 74:F4:34:7D:70:91:DD:2E:E2:FE:16:99:9A:F1:70:32:60:00:C3:A5
Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial: 010D0C9F43285849271F4507FC2AFAF6506D5000
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa
Signing time: Tue 11 Mar 2025 13:13:21 +0000
ROA not before: Tue 11 Mar 2025 13:13:21 +0000
ROA not after: Mon 09 Jun 2025 13:13:21 +0000
asID: 55201
IP address blocks: 198.1.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:27:1f:45:07:fc:2a:fa:f6:50:6d:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Validity
Not Before: Mar 11 13:13:21 2025 GMT
Not After : Jun 9 13:13:21 2025 GMT
Subject: CN=717cdd94-d780-4efc-a0e0-7bd7d2835748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:bf:c4:e1:22:bd:3d:59:ec:8b:6f:7c:5c:
29:d8:1f:d0:32:23:52:fe:c2:fe:eb:d6:43:e3:d1:
92:58:14:5e:24:8f:5b:7d:c4:b7:2d:5d:b4:77:fd:
b5:36:0d:23:5b:34:94:6c:ad:03:d1:e9:22:da:45:
fe:2a:1d:3e:34:63:82:81:b1:45:5e:58:57:6e:92:
02:75:57:24:d8:e3:12:be:34:7e:e0:2a:31:0e:5e:
fe:2c:93:ad:ad:ac:18:1d:a0:25:58:5a:81:0c:b8:
85:cd:45:c1:27:3f:6d:80:82:98:61:11:4c:d4:3a:
85:f8:8e:63:66:44:7c:b3:c6:60:1e:18:7c:a1:8a:
25:7b:7f:05:4a:3e:c0:c8:d8:da:83:89:67:56:56:
e1:49:60:14:7b:be:4a:81:40:23:80:93:90:55:60:
25:6c:5a:50:ee:e8:6d:b1:db:11:21:7f:45:13:40:
70:98:c9:ae:c1:51:26:da:a8:96:91:57:bf:64:58:
05:b9:07:a3:de:a2:4b:ac:3f:da:0b:54:94:bd:61:
14:c8:eb:de:b3:73:d1:ff:d2:ec:25:31:a7:4f:a4:
18:8c:7e:65:f9:8e:5d:81:a4:9a:5d:23:9a:0f:5d:
78:50:ea:c0:ae:c7:4c:f8:83:8b:16:a5:48:78:54:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F4:34:7D:70:91:DD:2E:E2:FE:16:99:9A:F1:70:32:60:00:C3:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
X509v3 Authority Key Identifier:
keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.1.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:67:75:0a:44:58:9a:9b:02:34:6d:2e:1a:48:7c:aa:04:cb:
50:f5:df:2f:e4:e3:c9:15:5a:00:b5:79:36:bc:39:1b:f3:fb:
9c:ca:a2:68:64:39:8b:6b:5b:cb:b7:80:05:8b:4b:29:eb:d4:
a4:a4:d2:03:cc:9b:ea:cb:15:ca:b9:cd:c1:38:dd:fa:02:40:
37:af:b4:c3:63:a2:f8:ca:94:85:3a:7a:a1:a8:d4:9a:95:6c:
2f:4c:32:e4:af:d7:10:cf:ca:11:c2:5e:27:c8:97:b4:b3:f0:
41:e8:07:12:7d:d0:86:ef:64:2a:29:cd:07:50:b0:9c:6f:6d:
d1:66:c2:e7:19:5b:b6:2e:a9:b9:3d:9c:04:7c:55:1d:6f:f1:
ab:fc:4c:7f:9f:53:97:9b:64:ce:de:59:79:7f:f7:db:1b:fb:
a2:19:4f:cb:93:bd:1a:81:32:2e:30:61:aa:0f:70:bb:ad:86:
fc:8e:d0:75:41:34:17:4e:00:27:61:4d:bd:02:93:48:17:4f:
a2:ec:fa:cd:75:15:2e:37:63:1e:25:a2:8a:bd:5a:b5:35:8c:
c1:d0:d1:e0:89:e2:5b:d6:07:ed:26:05:aa:e3:03:e1:62:b1:
a7:b0:dd:da:5f:d7:26:06:84:b6:0c:1a:72:fa:b9:06:da:8c:
87:6a:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:13 2025 by rpki-client