Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f67b7bf-83b3-3628-8ad1-a5e29d8dad1d.roa
File: 4f67b7bf-83b3-3628-8ad1-a5e29d8dad1d.roa (raw, json)
Hash identifier: QRd82iLkcBc5zNh7iDG4jdUUNkyyTpvOjqzda7pUFGc=
Subject key identifier: 74:FB:DC:61:80:02:1F:A9:E8:89:D8:24:39:BA:A2:4C:75:E1:64:25
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848387C551FB622CE3132EAB300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f67b7bf-83b3-3628-8ad1-a5e29d8dad1d.roa
Signing time: Mon 16 Dec 2024 01:42:40 +0000
ROA not before: Mon 16 Dec 2024 01:42:40 +0000
ROA not after: Sun 16 Mar 2025 00:42:40 +0000
asID: 132892
IP address blocks: 198.41.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:7c:55:1f:b6:22:ce:31:32:ea:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 01:42:40 2024 GMT
Not After : Mar 16 00:42:40 2025 GMT
Subject: CN=354b29e4-79a2-4be3-8fe7-e4e125d3f19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:3c:4c:a1:7a:05:44:53:5f:ff:e5:c9:b4:
a8:46:7d:6d:95:f2:b3:98:35:c7:97:42:c8:2a:b6:
51:07:45:b9:11:9b:74:84:47:0a:dc:41:d0:16:d3:
ad:6b:5e:c1:51:43:57:2f:3c:43:42:dc:36:9a:ac:
56:26:ee:8d:64:e5:5e:91:b0:19:4d:af:fe:7b:3f:
04:af:af:80:0c:55:96:42:c9:be:a5:b8:69:e3:29:
b4:a3:28:65:6a:f2:90:fd:ad:fd:b5:77:33:56:81:
d5:89:ff:d2:e2:ce:d6:26:aa:7e:23:40:25:04:76:
e3:48:88:58:d2:bc:d5:02:68:35:02:d7:a9:24:fd:
92:34:cd:06:db:68:bf:b9:7d:17:0c:1f:8c:83:34:
a6:fc:ab:c5:03:59:a1:7f:3d:ca:b5:77:d2:e8:f3:
24:be:58:63:80:4e:b6:13:fb:ed:18:c7:3d:c7:ed:
47:62:41:52:62:5b:9d:5d:94:cc:d3:55:8b:a1:26:
2c:99:05:12:01:3c:5f:ca:28:d3:6f:e2:ed:ec:b3:
c7:52:9f:e8:fa:b4:fb:34:13:0a:df:48:cd:71:67:
ae:12:4e:46:cb:d0:d1:5c:18:6a:c3:86:ad:b8:19:
e1:59:de:69:05:9a:c6:e0:5d:fc:0a:ef:0f:f1:d6:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:DC:61:80:02:1F:A9:E8:89:D8:24:39:BA:A2:4C:75:E1:64:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f67b7bf-83b3-3628-8ad1-a5e29d8dad1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:bb:b5:6b:e5:16:c2:4f:98:62:83:ec:90:8b:6c:bc:61:cb:
14:7b:2b:69:3a:40:2a:ee:0f:15:59:11:56:18:71:14:e8:43:
e2:a7:60:1c:ba:ff:d2:96:e9:e3:e4:d0:de:3e:37:64:dc:f7:
77:a4:73:6d:21:7d:f0:fd:c8:6f:8b:30:0f:40:a1:dc:6c:2f:
90:05:8a:98:df:28:46:f7:f0:9f:f1:c8:f0:9c:18:12:02:0e:
40:29:90:20:d5:51:d8:38:33:53:0c:66:74:09:d4:98:c7:93:
a6:4e:39:b9:b1:2f:51:fc:56:97:57:a4:b9:b0:ca:eb:04:7a:
41:6b:df:e9:2f:24:66:cb:5c:4c:a3:04:cd:fb:67:a9:f7:9c:
2d:6d:56:17:36:f3:e1:04:4e:7b:2a:3c:3a:ee:ae:3a:8c:4f:
38:61:99:8c:a5:c9:2e:24:ea:c9:96:35:45:c1:48:45:10:51:
51:38:5d:95:24:0b:8e:50:16:f1:2b:68:25:46:5d:fe:2d:c3:
bd:e9:08:e3:4e:0d:5b:48:9a:b7:26:f1:e3:52:4f:ca:a1:f6:
80:3c:70:65:ff:e4:ec:5e:88:8c:a2:f5:06:18:7d:07:2d:31:
5c:e8:cc:13:ee:e2:82:9b:c1:21:2b:4f:2d:56:a3:29:48:12:
17:97:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:23 2025 by rpki-client