Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/255548dd-3457-3897-86da-ed823c5f8b42.roa
File: 255548dd-3457-3897-86da-ed823c5f8b42.roa (raw, json)
Hash identifier: NJNIbBgYL3akT/i19eQkUbg/FxV4QuRIjkwUXz9ZTe4=
Subject key identifier: B0:43:0F:B6:2C:25:89:F6:98:02:31:96:C4:BC:FB:57:53:94:21:26
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F4328584953C417377F1F3AA4D37E0600
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/255548dd-3457-3897-86da-ed823c5f8b42.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 2152
IP address blocks: 198.188.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:17:37:7f:1f:3a:a4:d3:7e:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=3b33fced-5e47-44d6-90dc-78fcc1e291bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:aa:f8:90:3d:2b:ea:d3:4a:99:45:6e:d3:
26:b1:dc:b6:ea:eb:d6:0d:26:1d:a1:23:91:e4:af:
9e:46:35:63:22:9b:e2:4c:a3:2a:65:01:b1:4d:bb:
d7:08:73:0c:01:b4:e6:1b:e9:e7:34:de:f7:26:87:
66:8b:e3:da:6c:c4:0e:89:7d:00:c8:f3:70:4a:95:
e8:0b:53:f6:47:52:2a:bd:1f:11:d4:ff:a8:73:3e:
22:4a:19:31:7e:bb:d0:bd:2b:c0:55:d7:9a:bd:82:
f1:a7:cb:2d:18:5f:2e:ae:78:ff:49:c1:3e:54:d8:
3b:ed:b6:41:e9:4b:e3:7d:24:1a:68:a7:29:87:49:
57:fa:9c:a2:dd:d5:12:f2:23:68:5f:ca:41:1a:98:
bf:f2:cf:35:59:a6:ca:0f:49:a2:8e:1d:a4:88:71:
96:50:17:f6:03:11:85:dc:89:f9:2f:7e:71:fb:b0:
32:e1:ea:d3:54:0d:f0:95:ff:5f:80:35:6a:df:35:
5b:82:b5:0b:a1:0a:50:de:bb:29:cb:1e:de:22:b6:
45:8c:4f:fe:08:23:eb:b5:13:00:15:34:f6:ad:ea:
04:f5:a9:58:1f:20:89:fb:ab:cd:a8:67:54:4f:30:
f9:8a:93:4b:eb:4f:9c:66:34:30:7f:e6:8f:cc:0e:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:43:0F:B6:2C:25:89:F6:98:02:31:96:C4:BC:FB:57:53:94:21:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/255548dd-3457-3897-86da-ed823c5f8b42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
198.188.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:e6:7c:d7:30:23:32:c9:69:a8:72:fe:30:17:1e:c3:ae:ac:
a3:7c:61:6c:83:f2:d4:4a:18:0b:fd:3d:93:b5:61:10:bf:78:
4a:99:44:d4:cb:ff:1f:af:4a:10:6a:1f:9e:e2:e2:1a:ad:80:
e1:58:2a:af:d5:19:06:94:87:81:6e:da:5d:38:e4:2e:9f:c5:
8f:dd:0e:34:9d:48:0a:84:ab:c3:5d:d8:3e:0e:ad:a2:98:c4:
1a:e2:7c:24:d3:a5:53:78:38:0d:09:18:3d:7a:2a:fc:17:cc:
43:0f:47:a8:aa:4b:32:76:22:f3:11:15:96:a2:92:95:fe:90:
4c:5f:41:82:5d:8e:29:8f:7f:e2:de:69:49:ad:59:5d:e4:f8:
d1:54:1d:63:a6:55:22:c5:a4:46:c1:63:df:46:99:cc:ec:8e:
c9:67:27:7d:ca:6c:6e:e0:7c:58:8f:12:0b:68:9e:69:d5:d2:
8f:36:2a:12:cb:59:cf:13:c0:0a:85:35:23:8b:3c:1e:57:50:
78:9f:c7:ab:f3:c4:1f:46:25:d8:ba:3a:7b:26:48:a8:95:bf:
c5:da:8f:51:e3:b6:10:ba:70:52:53:2e:05:9a:5b:90:0f:14:
3b:9e:0d:7d:08:ad:35:84:f1:d2:65:08:a9:82:88:dc:33:90:
6f:ed:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:26 2025 by rpki-client