Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa
File: a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa (raw, json)
Hash identifier: w4lvrSE2Af2Gw8kQGtMwKrAcNQQWUhveamuW5Mu7T9c=
Subject key identifier: E3:94:0B:F0:EA:7F:79:6B:1C:CF:0C:08:B3:3D:6B:DE:DF:51:BE:42
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7A3C5FCF2CB15CCD2E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 0
IP address blocks: 198.133.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7a:3c:5f:cf:2c:b1:5c:cd:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=484b78f4-4bbd-436b-8354-e45f9a951439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:b0:21:c9:d5:0f:74:93:d6:d4:74:fa:b4:
f9:d0:2a:5e:d4:69:3d:cf:ad:c3:9e:ef:5f:a0:b5:
2c:6a:da:1d:0c:1a:95:f2:d4:da:3e:81:b5:a4:5d:
46:2c:40:2b:74:aa:c7:5d:a3:08:5a:10:a8:c7:50:
c6:a0:d9:3e:e6:71:0d:e0:59:05:50:91:45:86:74:
00:85:eb:3e:9d:27:bb:f4:8d:0c:c7:2c:ce:cf:6a:
f9:41:2a:04:e0:20:5d:38:2d:94:04:46:04:b7:12:
fc:4c:25:20:4d:bb:8c:8f:c0:ba:00:e2:73:08:16:
8e:b1:cd:b4:e3:8c:60:80:64:54:22:4d:e7:cd:f1:
7d:20:dc:30:7c:ed:28:31:33:12:8b:aa:b8:fc:21:
a5:fb:49:fd:0e:da:a8:f8:b2:51:97:d8:82:48:5e:
b9:a8:bc:a6:c1:1c:26:4f:1d:bf:9c:5e:46:d7:6c:
58:49:74:47:1f:70:9a:35:5a:6c:bc:b1:09:65:df:
0c:2f:59:4d:eb:2e:94:cb:b7:1d:eb:05:85:23:a9:
27:d2:a7:d9:6c:8a:bf:c7:7b:f3:c4:c9:94:26:47:
9a:45:ab:c5:f8:25:2c:88:4c:2e:8b:13:0b:b1:fb:
51:d9:93:5a:f5:2f:88:4e:59:1d:2f:f2:3b:72:49:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:94:0B:F0:EA:7F:79:6B:1C:CF:0C:08:B3:3D:6B:DE:DF:51:BE:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:bc:63:2c:e8:2d:c1:89:d0:b3:36:52:b0:e3:d4:ee:1d:cb:
fd:85:e7:9e:1a:da:58:e0:20:a0:24:e4:40:05:af:27:70:88:
ab:dd:62:62:d6:65:19:29:94:bf:e0:75:2f:fd:40:5f:dc:0b:
a3:ca:60:77:41:a8:3f:1f:12:c9:1d:73:d3:8b:d8:4d:73:33:
fd:ba:c7:ba:69:51:ea:58:6d:ba:b4:81:b1:39:f3:cc:e9:70:
6c:79:ce:73:04:10:b6:9a:29:1c:85:84:84:12:65:c9:9b:bb:
fc:ec:b3:7f:3b:4c:fd:86:b9:24:77:08:42:aa:54:22:e1:e1:
bf:5f:10:3d:5f:d7:af:b5:18:cb:0b:16:05:f3:70:73:c4:c1:
9f:45:a5:9c:36:68:b0:da:35:09:04:00:75:68:df:2f:2a:87:
d3:f7:75:62:3f:8e:c4:aa:99:dd:52:2b:f7:c8:8a:14:63:7a:
fe:67:62:91:4c:8f:48:f9:b2:f0:16:86:8a:f9:40:ec:ed:ad:
73:8b:7b:ff:91:82:97:a0:7b:17:14:97:3a:1a:e3:29:96:cc:
5a:47:c1:24:a1:c9:9a:b8:9b:1e:88:21:20:ce:50:3b:cc:24:
00:1a:83:23:a7:f6:2b:e7:b1:2c:8e:f7:8d:39:38:5d:ab:41:
b4:10:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:44 2025 by rpki-client