Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8cd087a-8464-3848-b254-b4db3c8391ac.roa
File: f8cd087a-8464-3848-b254-b4db3c8391ac.roa (raw, json)
Hash identifier: 4frJM2DYRHL4NgjNmS7J4/INrVS9nUO9D9M5aCumqKw=
Subject key identifier: 2E:D0:81:18:08:69:6B:38:0B:06:C1:8E:DD:47:02:4D:B1:68:F5:88
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494303F80E2A185054ACB69000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8cd087a-8464-3848-b254-b4db3c8391ac.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 0
IP address blocks: 198.105.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:f8:0e:2a:18:50:54:ac:b6:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=ea777815-7d65-450a-8365-b10e1bf5eebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:00:78:ee:e3:00:5d:40:f7:1c:94:5b:5c:04:
1b:f2:db:3f:da:77:1f:9d:47:94:27:23:53:0f:98:
c6:30:8f:78:e0:24:7a:6d:2c:00:52:8f:1a:1f:58:
cb:ec:b0:e6:1c:83:dc:d1:80:86:18:2b:f9:44:c3:
bd:d1:52:07:23:a6:50:50:31:b5:8f:6d:e5:5d:5c:
c8:76:47:b5:14:68:fc:87:5d:59:f6:1c:4e:4b:aa:
c9:bf:72:77:5b:2a:21:fa:d2:05:84:38:5c:25:6d:
6f:82:a6:0d:cf:74:37:8b:e6:34:38:05:ca:fc:44:
d6:ba:a6:8c:1d:2e:26:5c:7a:4a:35:f0:ec:40:c9:
a9:77:9d:92:9a:be:39:64:f9:a0:bc:47:3f:dd:49:
2a:ed:a6:3f:fe:34:b0:a5:c3:25:e0:92:69:1a:b1:
24:f1:5e:d3:62:ee:05:54:94:11:9b:45:b9:cd:c8:
92:f1:6a:44:4a:09:fa:ad:31:d4:c6:f6:e7:32:c8:
a3:c6:8b:ed:4f:b5:d6:97:59:28:4f:7d:72:b9:ed:
e6:f6:70:36:9c:af:bb:c1:09:1c:57:6e:6e:01:fc:
7f:06:e2:47:fc:e6:a7:d4:9c:9b:26:d0:bd:39:76:
5f:a0:c8:46:e8:00:de:37:39:31:37:fa:d4:b9:79:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D0:81:18:08:69:6B:38:0B:06:C1:8E:DD:47:02:4D:B1:68:F5:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8cd087a-8464-3848-b254-b4db3c8391ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
198.105.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:03:ee:3d:e4:45:f3:e7:63:fa:a3:da:0e:9c:60:41:e1:8e:
b2:8d:07:62:f2:f7:ac:34:a9:7d:98:b5:3a:3f:03:36:10:79:
a4:7a:38:94:b1:f1:f5:99:54:d3:71:e9:70:42:2b:d3:27:a2:
fc:8a:1d:9b:ec:c1:2f:cc:23:21:df:03:49:43:df:3e:e4:3e:
1d:b1:8c:17:09:cf:9a:13:85:41:1a:88:cb:c4:a9:0d:d8:52:
c9:98:e6:fd:75:95:39:c9:4c:82:ef:cb:6a:7c:41:48:11:ea:
f8:07:15:68:c2:95:90:d9:ef:04:ce:50:ef:4b:f0:94:e9:bc:
51:13:5d:1a:06:f9:17:cf:71:8d:66:f0:3c:67:6e:ce:69:ed:
95:99:33:da:01:90:8c:f5:87:d1:c4:3d:74:66:1c:6c:4b:7e:
cf:64:1d:9b:55:7f:e4:75:cc:df:07:ac:d2:6c:7a:35:ce:cf:
61:a2:1e:ad:74:2f:1d:33:09:06:90:3d:6b:02:c6:03:a2:09:
dc:53:f0:dc:ea:62:b0:f8:71:de:34:b9:81:97:1a:06:14:e4:
b9:78:07:cd:93:60:00:a3:bd:e3:b3:8a:73:8a:52:48:1f:01:
1a:10:36:ce:17:2d:8c:b7:84:82:86:bd:07:a4:7c:e2:54:a8:
87:38:32:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:25 2025 by rpki-client