Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22653f84-c97d-39f9-aeb5-c96a98308635.roa
File: 22653f84-c97d-39f9-aeb5-c96a98308635.roa (raw, json)
Hash identifier: 2YIjAuB1AuJ/day8doSOvcTMVVN4rJ4GMPAUI/A5dJE=
Subject key identifier: DB:A6:A0:B3:E6:62:7A:49:BE:3D:E9:0F:9A:F0:8B:4A:6B:30:31:AD
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848387D05654CBFC7510EEE7840
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22653f84-c97d-39f9-aeb5-c96a98308635.roa
Signing time: Mon 16 Dec 2024 01:44:03 +0000
ROA not before: Mon 16 Dec 2024 01:44:03 +0000
ROA not after: Sun 16 Mar 2025 00:44:03 +0000
asID: 202623
IP address blocks: 198.41.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:7d:05:65:4c:bf:c7:51:0e:ee:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 01:44:03 2024 GMT
Not After : Mar 16 00:44:03 2025 GMT
Subject: CN=5b6eb494-a381-410a-b7d7-7f1145d9e1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:71:51:e9:83:fd:f8:91:85:f6:5d:5c:da:
8d:b0:a3:87:c3:48:e3:62:23:e7:75:30:e7:21:43:
ee:24:ec:dc:f8:48:b2:56:02:b7:59:db:0b:c8:f9:
ee:9a:73:5d:52:95:e5:bc:6c:40:fc:58:07:59:99:
01:84:ec:eb:a3:b3:0a:74:26:2a:fd:a4:a9:c4:f9:
70:c9:90:5d:c8:23:65:46:77:7d:b7:67:28:9d:03:
d7:a8:08:44:65:71:43:fe:e5:53:ea:a4:8b:ae:74:
8b:8e:7d:e5:0c:1a:d0:67:d3:2e:7a:a2:f0:30:5c:
f0:d2:be:8a:57:35:04:a9:1a:40:cc:82:de:89:e6:
52:db:b3:30:bc:55:be:c2:22:8d:5e:8d:75:ee:35:
4d:6f:2e:6b:75:8e:2a:e3:f1:21:08:fc:1b:83:f0:
b4:28:e2:6b:c6:96:12:85:88:4a:1a:d5:49:76:d1:
99:1d:53:0d:3a:5a:2d:bc:8a:d5:8a:63:1e:fc:97:
4f:e1:01:7d:0d:db:6d:00:6e:89:d4:a6:14:4b:0d:
55:c0:fb:70:6b:e2:54:15:85:e8:b5:21:53:e3:70:
93:1d:5d:b3:91:6e:eb:e9:36:43:da:ec:97:0b:c9:
91:07:1f:c0:64:f5:bf:10:97:7e:0c:d4:5b:2a:97:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A6:A0:B3:E6:62:7A:49:BE:3D:E9:0F:9A:F0:8B:4A:6B:30:31:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22653f84-c97d-39f9-aeb5-c96a98308635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:7f:b8:6a:d5:71:c2:d1:fc:d7:71:c1:51:88:41:af:3a:bf:
3b:65:27:66:c2:3e:96:1a:df:26:42:92:a0:e0:9e:a5:14:cb:
51:9c:43:97:c0:00:d6:84:55:fd:42:7b:e3:ca:0c:7c:7b:db:
4b:91:31:12:9a:02:ab:2c:3f:3f:d1:bc:1b:64:3f:74:a3:45:
7b:de:c5:b4:92:fe:18:3f:da:53:64:a9:91:05:8e:7e:19:ab:
ab:c3:00:c7:38:3d:dd:58:cf:49:53:18:71:66:22:5d:10:63:
2b:93:99:ff:8e:1b:93:d9:60:33:fe:52:4c:7a:9b:ea:6f:69:
4e:93:f8:26:44:48:fe:58:4b:78:be:81:30:e7:c7:8b:43:3a:
df:6f:2b:6c:9d:66:7f:74:89:6f:4f:b4:8f:25:2b:cb:01:ae:
37:5e:b5:09:96:ba:0c:c8:76:07:5f:49:7c:2f:f3:09:ec:1d:
38:7b:f5:3f:65:b5:2b:2c:b5:0c:64:4a:73:c1:79:43:dc:5b:
8d:75:81:a1:82:a1:77:92:99:0c:55:4a:f0:dd:22:06:c2:32:
88:c3:f7:c3:27:12:5a:14:97:ca:fd:5e:3d:01:7d:da:f4:a1:
2a:87:9d:fb:d0:b0:1d:6d:5a:0c:02:8b:dd:2e:3b:ca:cc:c8:
67:d9:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:44 2025 by rpki-client