Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957efa63-8fd9-38df-a1a7-ae426a411cd4.roa
File: 957efa63-8fd9-38df-a1a7-ae426a411cd4.roa (raw, json)
Hash identifier: mS61Fk/2oT3wAs4rrETbJ+TQaDK5mRaxsx07J5Jx244=
Subject key identifier: ED:99:AB:10:16:63:91:CF:0E:B0:A8:09:24:F1:89:86:D7:07:13:95
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7A5CE69756C92CCC6C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957efa63-8fd9-38df-a1a7-ae426a411cd4.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 0
IP address blocks: 198.133.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7a:5c:e6:97:56:c9:2c:cc:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=d9e9611b-1115-4f6c-bc8f-76f1507b1af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:63:e6:e3:f3:09:43:86:b0:ff:79:78:6a:
62:de:bb:39:24:cf:46:e1:cb:bf:d2:1c:33:eb:67:
ef:03:2d:1f:c7:46:b5:f1:e7:44:b3:06:6b:a4:91:
f5:97:04:4b:10:d0:27:41:5c:77:17:8b:1e:a1:9e:
d0:47:dc:93:e8:0f:ef:b1:98:4c:0a:67:94:22:1f:
f7:8c:31:eb:ae:dd:21:6a:d6:a7:1b:fd:18:bd:b4:
3b:9d:bf:60:08:48:b0:9a:c1:29:18:fd:fa:4a:42:
67:e8:2b:1e:12:10:52:99:50:47:82:56:f4:68:46:
76:9d:5e:06:6e:96:71:b5:c4:fc:09:06:f9:3d:06:
ec:9c:b9:78:b6:f0:35:9c:e1:f8:bc:96:ef:4a:46:
a3:f9:33:77:85:c9:20:f8:15:dc:81:9f:45:66:d8:
2e:4b:9e:a7:af:85:39:b4:84:71:59:cd:9f:a2:b6:
4f:14:1d:44:b7:ba:27:50:84:2e:be:ed:a2:eb:c5:
ff:96:64:16:47:e3:95:2c:09:81:d2:65:3b:76:a3:
19:9d:51:64:6c:82:76:0c:3d:de:65:9f:54:3f:23:
be:bd:fc:ec:2a:6f:e8:95:81:b2:4e:b9:8b:50:3a:
c6:9f:5f:2c:81:6e:5b:6f:90:00:05:8e:98:77:dc:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:99:AB:10:16:63:91:CF:0E:B0:A8:09:24:F1:89:86:D7:07:13:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/957efa63-8fd9-38df-a1a7-ae426a411cd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:b8:1f:7f:c0:ad:f0:5a:e8:93:0e:7e:bd:fd:85:1e:41:8b:
bd:2e:4a:35:11:c8:61:5f:4d:41:cd:c8:10:61:f7:25:3a:9e:
a4:41:7d:50:52:24:1e:41:75:30:78:b5:71:77:e6:73:c7:96:
c5:df:04:c3:01:de:fc:08:ef:7a:cd:bb:36:52:9d:ef:8b:99:
73:4a:12:1a:e3:60:27:3d:6a:d6:61:73:36:af:34:86:9e:f9:
c8:51:05:6d:d2:48:a5:eb:e7:b1:59:23:d9:df:48:87:48:94:
e0:80:5a:bb:cd:43:d0:70:31:f4:85:8d:91:91:8f:56:52:53:
ee:5d:96:6c:ea:61:09:12:79:6c:47:cd:41:35:61:0c:96:7c:
f7:25:f2:80:2f:15:83:8d:87:ce:57:1f:49:c3:29:d3:7d:80:
fa:0f:c5:0b:7e:39:ac:4b:fb:a1:05:dd:7f:7f:5e:44:bf:17:
ca:4f:99:8a:0b:06:26:c3:c3:e5:0d:82:ad:86:98:88:48:7e:
05:8a:83:c7:b1:cd:07:ab:83:b5:2b:6b:d6:10:76:73:e3:d3:
43:d8:02:df:87:8d:c7:ba:59:2b:64:b8:b4:d1:eb:13:02:2f:
03:9f:e7:41:b9:ef:5e:21:b4:aa:82:19:dc:6c:e1:b4:58:de:
c5:4a:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:21 2025 by rpki-client