Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa
File: 6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa (raw, json)
Hash identifier: +4THLHUduTxxH/84LSXAji5sPosuXPKok0Lry3gGFDw=
Subject key identifier: 8B:59:67:69:44:42:3D:B2:09:13:E0:CC:C7:8A:DB:A0:67:30:CA:B1
Certificate issuer: /CN=d0677001-b062-4999-89f9-d882893f5a1c
Certificate serial: 010D0C9F43285848A236053EEB9A804F1C6EEC40
Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa
Signing time: Wed 22 Jan 2025 22:36:41 +0000
ROA not before: Wed 22 Jan 2025 22:36:41 +0000
ROA not after: Tue 22 Apr 2025 21:36:41 +0000
asID: 27628
IP address blocks: 198.169.125.0/24 maxlen: 24
198.169.127.0/24 maxlen: 24
198.169.132.0/24 maxlen: 24
198.169.133.0/24 maxlen: 24
198.169.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:36:05:3e:eb:9a:80:4f:1c:6e:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c
Validity
Not Before: Jan 22 22:36:41 2025 GMT
Not After : Apr 22 21:36:41 2025 GMT
Subject: CN=7e18d565-bf74-4927-953f-757de47c80c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:87:78:cf:47:72:12:4f:89:9a:0d:54:76:
17:1f:7f:5c:96:54:a2:69:af:7d:65:c2:9e:67:1e:
33:d6:d4:1e:2f:e0:96:3a:28:a5:07:47:2b:cb:eb:
2b:3e:60:f7:34:ea:27:a7:05:7e:ed:96:c9:c6:c8:
45:5d:b2:0a:44:34:2f:87:4e:ae:0b:3f:11:d5:e3:
15:39:8c:12:5b:d1:58:c7:4b:f9:86:23:ca:c8:4d:
19:78:d3:22:44:92:82:e3:a4:fc:98:00:a0:f7:93:
e7:e9:c5:c7:63:b3:89:9a:d1:36:42:5c:77:ee:ab:
eb:e2:a7:1d:72:95:96:26:d1:38:c4:3e:80:06:60:
fe:75:b8:82:d7:66:3a:ac:f8:68:bd:8c:f6:31:98:
1f:56:e8:45:e9:da:ca:69:0b:84:06:33:05:38:13:
6e:35:94:e3:03:2d:a1:b5:a3:02:a1:88:8f:dd:db:
25:c2:ed:3d:47:66:c8:29:fc:f9:88:25:b5:91:d7:
2a:a9:13:f9:7a:f8:11:2d:0b:a2:32:c4:b2:04:03:
8f:72:e3:97:7d:36:b1:a8:b6:84:7f:5a:22:3c:7f:
d3:37:82:e3:33:19:ac:b5:72:56:22:27:e9:56:ef:
85:60:60:e0:cb:c2:e2:7c:71:97:5c:e6:66:f0:c9:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:59:67:69:44:42:3D:B2:09:13:E0:CC:C7:8A:DB:A0:67:30:CA:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl
X509v3 Authority Key Identifier:
keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
sbgp-ipAddrBlock: critical
IPv4:
198.169.125.0/24
198.169.127.0/24
198.169.132.0-198.169.134.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:16:70:ac:83:f9:b4:5c:e2:19:69:91:b2:c6:8a:69:47:6a:
dd:d4:b8:cc:1d:6e:d8:3c:33:0c:9b:ac:16:81:23:ac:6a:da:
b0:22:ec:06:1d:c1:a8:75:87:b0:81:b6:39:c3:ba:42:1b:16:
a7:80:21:36:35:5a:25:01:18:33:d3:ce:7b:41:cf:f6:e9:f2:
7a:6b:09:55:0a:45:dc:4c:90:4e:09:44:01:8e:45:a1:03:7f:
c5:8b:71:8f:7a:7c:77:8e:80:3a:7a:91:83:fa:56:be:65:78:
8b:39:99:5c:19:03:5d:71:db:77:57:5c:80:c4:06:64:75:3e:
e3:ea:85:53:e8:35:23:c6:ab:3b:4b:6d:8b:4c:1a:ae:33:2d:
0d:ba:f2:ae:7b:38:09:b8:22:f6:3d:14:09:4b:8d:44:ab:17:
2c:9e:2b:6f:43:47:cc:e2:8e:ef:79:f5:2b:84:56:5f:02:26:
37:2d:9d:20:7e:e1:a3:98:63:8c:bf:8f:03:e6:cb:92:88:9a:
c1:10:98:c8:29:d5:1a:55:f0:60:de:34:3b:04:72:16:39:e4:
8e:59:45:de:71:9e:26:22:fc:ec:d0:43:ed:63:8f:ce:20:5c:
35:29:c5:96:2e:b8:9a:9f:ff:ba:ad:eb:60:56:10:fc:e7:cc:
02:6f:87:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:07:29 2025 by rpki-client