Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/b5a1f3d6-b295-3da8-97e6-fbb55cd653a8.roa
File: b5a1f3d6-b295-3da8-97e6-fbb55cd653a8.roa (raw, json)
Hash identifier: st/kRhGtWUpfQmXT+dwKWKkn4HOPjTcGMti6l6xMDjY=
Subject key identifier: DF:FF:E5:B9:5C:3A:15:91:BA:9B:10:5A:03:29:D6:90:80:49:33:3A
Certificate issuer: /CN=53f3af06-68ea-4591-9526-0c1fce331651
Certificate serial: 010D0C9F43285848100A84BB0D7BF94FD332F000
Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/b5a1f3d6-b295-3da8-97e6-fbb55cd653a8.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 395611
IP address blocks: 198.181.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:84:bb:0d:7b:f9:4f:d3:32:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=b59d2752-dce8-45e2-9e8f-4daddb8277cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:79:db:92:e4:8e:01:cd:64:fe:c5:7c:af:
04:0b:a2:70:a1:05:75:62:ff:2b:86:bb:5b:44:0a:
fa:d2:0e:fd:8c:17:50:26:91:25:96:3a:92:b2:70:
20:c5:73:4d:b3:b2:1c:b8:0c:9b:26:1d:6b:a7:9b:
b5:f3:83:ee:3b:5d:c8:80:cd:27:d5:cc:87:1b:d1:
26:fd:bd:5c:2e:40:ba:43:7c:fe:d4:a2:3f:6c:97:
ea:75:ae:bb:f1:ee:d5:ac:b2:3b:5a:50:89:bc:59:
53:cf:78:6f:47:3c:64:5f:24:37:dd:91:de:0b:a3:
9e:76:de:25:3f:59:14:09:62:42:db:f6:91:a7:33:
11:bd:2e:ed:56:36:78:6e:a0:4f:8b:8f:7a:6a:75:
cd:f8:6e:a9:c8:d2:73:2e:af:5a:86:a9:f0:22:35:
84:12:89:87:51:0b:e8:66:6b:e6:57:3a:17:24:cf:
31:24:69:ea:a9:26:87:3d:f0:41:9f:17:56:bf:7d:
de:a4:61:3e:c2:9a:aa:c5:60:5d:c6:f2:cb:1c:0f:
42:a7:3f:a1:9d:f5:1d:78:2c:c3:63:32:6d:05:1e:
be:86:cc:dc:e8:69:57:55:76:85:bc:04:56:92:17:
48:0e:0e:2b:33:25:7f:f5:6d:eb:a6:1b:dd:96:bd:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FF:E5:B9:5C:3A:15:91:BA:9B:10:5A:03:29:D6:90:80:49:33:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/b5a1f3d6-b295-3da8-97e6-fbb55cd653a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl
X509v3 Authority Key Identifier:
keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
sbgp-ipAddrBlock: critical
IPv4:
198.181.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:a4:a0:38:cd:28:65:55:e0:2f:93:98:a4:1e:14:23:ea:73:
af:9c:63:6c:ea:8d:5d:fc:18:eb:3d:97:57:29:67:d6:4d:6e:
f4:10:ce:01:9c:04:41:7f:0d:a5:da:3d:2b:44:c6:77:e1:4d:
a7:24:68:c2:8e:b2:69:03:9a:7e:f7:6b:12:ff:79:47:dd:e7:
84:3c:7d:58:a1:9d:f7:fc:21:f0:27:d4:d3:c1:a2:6f:16:83:
83:ab:ac:67:23:0a:5f:a3:9f:0f:15:6e:d8:41:4a:3f:50:6b:
04:27:51:c8:57:6a:f0:06:3d:57:86:43:c4:35:68:c2:ec:64:
2c:6b:8d:e3:be:eb:0e:32:df:b5:52:25:d1:75:f6:5d:7d:45:
cb:af:cd:b8:59:9d:c5:79:4f:67:0c:b0:81:16:ad:9f:b2:c3:
d0:a1:ed:9e:ae:b2:e7:e3:57:69:5f:01:30:38:37:b6:13:e0:
dc:05:ec:d5:d5:99:4b:2f:d5:3c:bb:0f:9a:11:b5:8a:cc:37:
f7:24:a3:0d:65:0e:e6:89:f1:f4:82:ce:57:43:8e:e7:8a:e6:
96:33:05:4b:9a:16:05:c5:bd:2a:12:77:ba:3b:40:9e:36:64:
18:bf:7b:80:5d:4d:18:06:3f:56:78:8f:b9:a5:59:0e:80:78:
9c:38:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:41:38 2025 by rpki-client