Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/341edec5-b518-3c8f-a902-95c55b0baaa0.roa
File: 341edec5-b518-3c8f-a902-95c55b0baaa0.roa (raw, json)
Hash identifier: MoyJetM+43x2FdnSR0udE4jgg78Qhc1cJjkc2DC+bG4=
Subject key identifier: 67:80:E2:DA:35:5B:CB:83:23:1B:7D:54:BC:5A:05:1E:25:66:48:E7
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F4328584940397F69551E5508A3563300
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/341edec5-b518-3c8f-a902-95c55b0baaa0.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 2152
IP address blocks: 198.188.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:7f:69:55:1e:55:08:a3:56:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=0c45e0dc-6bcb-4481-942a-81ffd378e3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:8a:ec:23:87:a2:c6:73:21:26:00:3e:7d:
f9:a9:b8:01:71:0e:32:1f:8c:ca:f7:b4:8d:13:fa:
73:fb:93:ea:92:db:f4:80:75:ae:54:d6:d3:be:88:
52:cf:6d:27:43:0c:2a:a0:d0:bf:f8:df:ac:50:d0:
2f:86:29:61:49:00:dd:d3:b6:96:42:39:42:80:b0:
a1:3e:ea:46:94:47:05:f3:11:11:24:f6:0a:bf:47:
24:e1:89:5a:57:42:f4:15:39:7d:db:05:cf:93:93:
db:8d:04:be:7f:25:f9:e1:5a:37:10:85:35:d4:a4:
e6:49:41:c3:b4:86:bc:2a:a0:f2:74:65:02:6f:89:
b3:d5:49:84:59:33:14:6c:f8:25:9d:a3:9e:48:63:
7a:82:d9:9d:95:9e:33:d4:44:24:94:4c:77:85:e7:
71:31:ed:0e:eb:c5:61:0d:a9:64:a9:c9:39:f8:39:
93:b5:83:fb:37:53:54:a8:e8:eb:4d:30:dd:a1:da:
37:33:9b:00:9b:62:98:75:d5:ee:b0:96:26:73:61:
ec:26:ca:54:d3:2f:ef:02:08:25:56:1b:2e:ee:52:
be:17:0a:07:84:42:a5:ab:d4:06:39:bc:c3:e6:ee:
ce:bf:d3:1e:0c:ba:b0:fa:10:73:e3:fd:41:6d:8d:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:80:E2:DA:35:5B:CB:83:23:1B:7D:54:BC:5A:05:1E:25:66:48:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/341edec5-b518-3c8f-a902-95c55b0baaa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
198.188.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:1a:3c:1f:fb:e6:92:63:00:08:cd:0b:14:74:39:6e:22:1c:
df:02:ea:8b:e5:66:a3:46:59:36:9b:8c:4c:8e:ce:fa:be:b4:
35:55:42:3b:6b:68:18:90:16:e4:22:a6:84:af:71:88:69:1d:
2a:37:e7:04:7e:a1:58:12:db:45:9f:4c:f2:8d:5c:d0:da:00:
8f:44:da:d1:e8:65:ec:db:60:0c:eb:49:ad:37:8e:83:39:1b:
71:20:fe:02:f4:4b:5a:4c:cc:ad:dc:13:0e:0b:6f:35:bb:e2:
ec:40:14:94:95:b2:07:26:6f:d4:cd:ff:06:fc:d5:61:b0:c9:
65:43:fb:15:fc:d2:1d:3f:c7:3f:d9:5d:7f:05:6f:8d:06:77:
b0:03:4c:8b:0d:b3:88:13:76:88:5f:1c:b1:38:d7:a3:d5:3c:
06:00:25:11:7f:de:4a:78:5e:a6:cf:c1:e9:35:70:f6:c1:ec:
94:1e:70:27:18:82:3a:0e:ca:ff:45:b2:ec:65:67:ee:9b:4b:
8d:d5:e2:56:6c:96:d3:52:f0:e1:c7:c5:68:b1:6a:30:08:14:
6d:7e:44:dc:18:95:fe:db:5b:f0:2f:9d:a4:1f:77:6a:a5:ad:
38:5e:6d:54:f1:41:15:be:46:c0:d1:6a:42:42:d4:f9:cf:48:
46:36:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:02 2025 by rpki-client