Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58ceadfa-7b3b-34b8-87c5-8e8526c7b2b9.roa
File: 58ceadfa-7b3b-34b8-87c5-8e8526c7b2b9.roa (raw, json)
Hash identifier: r9ahDJo0Dw6IN1rgXRXoDAmmDbqlk/VEnev2MdaTRms=
Subject key identifier: 86:EA:01:DC:8D:CC:0B:98:75:6D:59:4B:E9:28:B9:47:E5:EC:70:EF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848387BFA1B2749909F47822C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58ceadfa-7b3b-34b8-87c5-8e8526c7b2b9.roa
Signing time: Mon 16 Dec 2024 01:41:57 +0000
ROA not before: Mon 16 Dec 2024 01:41:57 +0000
ROA not after: Sun 16 Mar 2025 00:41:57 +0000
asID: 132892
IP address blocks: 198.41.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:7b:fa:1b:27:49:90:9f:47:82:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 01:41:57 2024 GMT
Not After : Mar 16 00:41:57 2025 GMT
Subject: CN=6bdc95e8-94a7-4d0f-85b1-be24ee0a3db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:ee:92:7b:e6:94:11:b9:10:42:79:33:8f:
e3:53:af:72:8e:c1:92:99:65:c9:2a:4c:18:24:7f:
4c:00:b1:18:ae:61:78:7e:d7:ee:10:b9:81:6b:8d:
96:2b:78:e9:02:e7:66:d6:2a:2c:6b:fd:78:6c:e1:
b5:f1:15:c5:93:7a:bd:0a:83:87:54:59:7d:5b:78:
37:28:89:c6:8e:a3:7a:e3:d5:50:7e:b1:23:bf:f2:
80:5a:e4:1c:1b:3d:b2:b8:24:fc:1a:f1:a1:c5:11:
20:09:9f:f6:ab:0a:15:55:c2:b9:53:8f:3f:b4:57:
00:1e:ec:59:ce:83:f0:4d:d1:0e:44:db:22:90:db:
43:2c:d3:5e:cf:55:9a:98:25:23:34:dd:f4:4b:54:
b4:0c:a2:2b:04:8f:2a:27:65:65:20:d8:f3:12:53:
d6:7e:5b:30:33:a3:c9:cb:22:7c:da:e9:ca:e1:40:
c3:9a:7e:13:12:9a:a7:67:79:df:a7:84:ea:cc:d4:
39:f3:63:57:81:f4:15:0e:af:ef:94:14:70:46:21:
08:36:e9:23:e7:93:2c:81:fb:f2:b3:31:37:c6:25:
63:d7:93:6b:6a:32:9b:32:8f:06:14:8b:b9:dd:29:
78:af:6b:cb:e8:35:6e:ff:1d:1b:8b:2f:27:4e:54:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:01:DC:8D:CC:0B:98:75:6D:59:4B:E9:28:B9:47:E5:EC:70:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58ceadfa-7b3b-34b8-87c5-8e8526c7b2b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:42:9a:59:e1:71:52:10:bb:04:27:5d:e6:93:dd:5f:66:ba:
ba:a7:a6:f5:8d:b6:13:63:e2:9b:91:ca:cb:72:e3:9c:8d:04:
1b:23:89:2c:33:10:0b:56:b0:62:b6:b5:7d:95:84:9f:5e:81:
6b:af:7a:e8:bf:2a:87:0b:02:88:7f:6d:90:4c:44:60:ed:ba:
e9:ec:90:1c:63:ce:8f:df:90:94:18:38:95:b2:13:d7:0a:3f:
00:cd:26:2c:b1:c2:b4:ef:d8:c6:53:91:32:52:b1:92:1a:5b:
ed:9a:3c:8a:9b:06:92:18:85:ae:87:66:ec:c8:10:4d:1a:9d:
e6:98:60:0d:dd:90:e7:3d:b3:33:66:f4:94:a6:f3:ee:65:3c:
11:2d:38:fc:8f:12:70:dc:bb:86:26:e2:e6:94:47:cc:d7:15:
a6:66:f0:c6:58:64:09:9b:86:76:d4:be:5e:d6:c1:16:3d:5d:
a2:74:76:e7:52:47:9a:e1:1b:6d:d4:78:01:61:d1:0c:c9:77:
60:6e:2d:1d:b5:83:0f:34:34:a9:7f:3f:1a:81:bb:06:4b:09:
aa:8d:a6:8b:a5:63:e0:cb:2c:49:a0:71:34:e3:aa:70:52:b4:
b1:64:e0:9c:d6:a2:76:e6:78:58:2c:d8:35:b0:e1:fd:7b:b4:
68:2b:af:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:41:30 2025 by rpki-client