Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa
File: b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa (raw, json)
Hash identifier: +LbVFtEao61i61BZKGJSViOQFs6AIZGB1idrq70u2Do=
Subject key identifier: B0:E9:8E:4C:33:92:42:28:00:74:8E:95:9E:82:9B:2B:37:9A:10:D3
Certificate issuer: /CN=9d167629-63e9-440b-9a9f-22a4570f0d78
Certificate serial: 010D0C9F43285848037B67795C4CD85E003FCBE0
Authority key identifier: 21:0F:F1:11:A9:9B:01:49:A9:3E:6C:C9:D3:0D:28:93:1C:8E:9E:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 198.17.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:67:79:5c:4c:d8:5e:00:3f:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d167629-63e9-440b-9a9f-22a4570f0d78
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=4cefe61b-6418-4319-a778-5fe12b9377c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:62:f2:25:a7:37:1a:c2:14:57:c5:01:69:
cd:b1:90:ce:9b:59:71:ff:47:66:c3:54:4d:a8:76:
ce:98:27:e0:e8:5d:09:42:8f:22:9d:01:f6:90:80:
ba:f6:de:78:16:36:27:cc:7c:52:10:03:51:68:e7:
5f:80:15:16:a2:25:74:0b:d2:9a:e4:14:d9:15:57:
74:82:59:56:7b:0e:82:52:d5:f4:6a:2f:75:0e:c9:
01:f4:a5:22:ce:92:87:bf:3e:2f:9d:9d:6e:d2:7b:
8b:ff:70:f1:0a:23:58:fe:17:81:65:76:9e:aa:a3:
9c:6d:e1:94:3f:ba:a0:38:89:b0:1a:a7:2a:09:35:
4d:62:f2:b5:8b:82:ca:8b:bd:d5:c8:33:76:3e:c6:
85:e3:b1:43:29:23:72:95:ce:62:9f:42:60:57:34:
4b:74:3a:0a:ef:28:18:f0:43:ff:ae:f7:23:44:cc:
40:1d:5d:39:2e:26:0d:8a:32:0a:b1:0b:e4:e9:db:
be:bc:25:94:29:fc:d7:a5:6d:57:c7:cb:a5:2d:b1:
10:91:39:66:d1:9c:92:6d:d5:70:44:a6:a4:e6:2e:
f0:18:9b:73:0d:c1:08:c4:d5:19:67:6f:cd:cf:a1:
dc:46:82:ab:dd:aa:cc:96:b7:4e:fc:18:de:45:84:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E9:8E:4C:33:92:42:28:00:74:8E:95:9E:82:9B:2B:37:9A:10:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.crl
X509v3 Authority Key Identifier:
keyid:21:0F:F1:11:A9:9B:01:49:A9:3E:6C:C9:D3:0D:28:93:1C:8E:9E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:2c:11:2f:25:fd:60:93:78:c9:cb:0d:79:3a:81:0a:c5:a5:
0b:e1:84:b9:ae:96:7d:6f:f8:87:f6:59:7c:c7:55:b9:73:d5:
cd:49:5d:76:8d:17:7c:3a:9f:2e:32:03:2c:0e:a9:13:2e:ca:
b8:2c:43:fa:47:0a:65:77:73:f7:04:ff:3b:68:1a:4e:8c:08:
82:b3:9e:e0:20:6b:e2:70:6b:dc:ac:ed:06:8e:7a:9c:d5:6d:
ed:c1:46:72:a6:dd:65:2b:2a:ab:8f:53:b8:b9:b9:b1:f4:e6:
81:02:1a:62:d3:6b:cc:77:bd:5c:31:52:b9:36:f9:1f:b8:19:
3c:81:4c:1d:18:87:7b:4f:bb:28:88:c9:24:01:95:86:92:69:
10:4f:6a:db:fa:a7:54:4a:54:29:4d:f5:77:3a:0f:22:be:f8:
30:11:4f:f0:fd:72:37:83:65:b7:a7:3a:c5:68:40:08:91:5a:
a0:67:85:92:c9:3b:7f:25:38:0d:81:2c:ac:b7:3c:26:48:3f:
0f:ce:18:8c:b9:41:14:2e:13:b9:51:f8:69:37:e2:ac:d4:ef:
a3:a2:89:77:69:ea:88:b0:e7:52:c5:33:de:ad:56:df:b5:51:
12:8d:66:7c:a1:00:5c:2c:8b:3d:ba:43:f5:b6:17:03:8c:0b:
de:d7:96:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:21 2025 by rpki-client