Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa
File: 40ca3da7-d905-3def-9f19-2e32b7805f82.roa (raw, json)
Hash identifier: toUkT6PbOS26RLwknKPNK5s/FEdsBUDeJSJYc/5lJwc=
Subject key identifier: F5:0F:20:27:26:8A:C8:60:0E:42:80:2E:99:0B:E3:6B:EB:63:93:C6
Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
Certificate serial: 010D0C9F43285848D211368BCE9829BFA8203280
Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 19782
IP address blocks: 198.51.243.0/24 maxlen: 24
198.51.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:36:8b:ce:98:29:bf:a8:20:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=8a7713c1-9039-49bf-bd58-02e797953310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:19:2c:71:67:e6:36:6c:cf:96:7a:25:87:
b7:57:41:0b:4b:3b:c9:5e:1a:22:b2:2a:7d:9f:02:
48:5b:56:cf:4c:36:22:0c:53:4e:d6:b4:e5:33:03:
61:b8:3e:c6:86:a8:7a:6b:39:75:38:0f:c5:52:24:
e6:75:10:87:c0:aa:a0:d5:92:c6:e9:76:12:1a:83:
3a:30:d5:74:aa:19:b4:fc:27:8f:79:5a:4e:53:eb:
51:d4:63:99:75:ce:41:b5:39:1f:f9:82:ac:ba:9d:
c1:b2:f3:17:78:0e:e9:09:dc:89:07:47:90:bd:69:
cb:29:28:ee:16:9d:1c:5f:30:3c:f4:c6:d9:6c:8a:
c2:d6:b4:af:8a:8a:99:78:28:9e:99:66:cb:d8:e0:
b4:e2:d8:35:cf:b2:e2:a5:25:43:bb:a6:1f:f7:ef:
1b:88:19:28:af:8c:84:10:c0:11:df:1b:8a:03:12:
7a:44:89:19:f5:f5:ca:9b:e2:69:52:35:d7:27:f2:
92:b1:03:79:51:e5:d6:f1:8b:6e:58:34:c9:73:77:
87:76:7c:65:d3:11:66:49:fb:5e:f0:95:6f:87:43:
d5:a8:5e:c7:2a:e9:96:60:4a:99:2f:33:83:6c:1c:
cf:a3:79:61:16:c5:90:49:19:e4:f2:68:f6:6b:77:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0F:20:27:26:8A:C8:60:0E:42:80:2E:99:0B:E3:6B:EB:63:93:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl
X509v3 Authority Key Identifier:
keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
sbgp-ipAddrBlock: critical
IPv4:
198.51.243.0-198.51.244.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:08:da:79:e8:b3:67:7d:d4:8e:e6:b6:d4:77:56:ea:6b:f4:
b1:94:8a:85:d5:28:86:ae:37:00:fa:06:84:99:72:ae:35:7a:
b2:1a:69:0c:36:7e:4e:b5:ec:25:36:ff:65:c1:a4:ad:ac:f1:
f1:92:6d:38:4f:96:2c:a9:5f:40:e3:e4:35:88:df:f4:c1:27:
19:7f:33:b4:28:66:cb:0d:95:24:f8:ce:57:ef:8b:91:94:44:
c5:cd:78:9a:b2:8d:51:e4:37:da:be:87:60:c9:4d:2b:53:ff:
04:8e:7a:b0:2f:0b:59:99:b1:ac:df:c0:59:3f:44:59:f0:5a:
d3:6b:c2:41:2c:79:8a:91:7d:ed:85:a6:7c:9f:6d:b6:c1:57:
36:4c:4f:ee:6f:74:1a:2d:f7:bf:9f:46:20:fc:ed:53:83:08:
d7:e6:00:7c:58:15:b0:67:11:95:8d:a6:c6:10:f7:c9:cd:70:
fe:1c:09:9c:91:fe:10:b8:fb:dd:13:2e:cc:b8:30:09:cb:1d:
b3:7f:af:ea:aa:db:ec:4d:b9:cb:5a:9d:03:9e:e6:f1:be:fe:
be:46:60:06:65:62:1e:17:9f:c3:e9:f6:d7:58:4b:c2:3f:43:
e4:92:fe:8c:a6:7a:17:79:16:f4:6d:06:dc:7c:d8:b2:9b:04:
d3:26:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:20 2025 by rpki-client