Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60c1e1a6-0534-329e-9bfa-4c1aafaa27be.roa
File: 60c1e1a6-0534-329e-9bfa-4c1aafaa27be.roa (raw, json)
Hash identifier: t5wct0DkBc6hZirDXnlfcly/Zet26GyosqGdAmfAMKQ=
Subject key identifier: F5:7D:25:12:4C:22:93:42:05:C1:2A:0F:53:C1:0D:DB:4A:FD:59:DA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305B4DCC9FDDE79BD4058AC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60c1e1a6-0534-329e-9bfa-4c1aafaa27be.roa
Signing time: Fri 13 Dec 2024 03:49:39 +0000
ROA not before: Fri 13 Dec 2024 03:49:39 +0000
ROA not after: Thu 13 Mar 2025 02:49:39 +0000
asID: 13335
IP address blocks: 198.41.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5b:4d:cc:9f:dd:e7:9b:d4:05:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:49:39 2024 GMT
Not After : Mar 13 02:49:39 2025 GMT
Subject: CN=f3a16fac-11f4-43c0-b8ab-ed187b3125e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:a3:13:42:1d:b3:c8:d9:e6:29:61:0a:44:
f6:d4:de:94:36:6e:92:69:9c:97:91:f0:d5:48:3c:
2a:24:3a:6c:17:9a:2f:80:07:18:57:67:84:ad:a6:
70:93:c1:1f:6f:f1:10:9e:0d:5e:57:d3:46:fa:f0:
4a:65:ac:60:4d:9b:9a:f3:b4:84:1a:ee:ea:40:13:
e8:ef:4f:3d:5f:d4:db:95:53:6f:92:16:06:45:c2:
23:72:06:2a:66:8c:ab:fd:7d:06:a7:a6:df:81:38:
e5:77:92:36:63:b2:b4:bc:c1:55:1b:b4:70:47:d4:
24:4d:75:07:5c:9b:6c:63:41:77:7d:f3:72:88:a7:
3b:99:4c:e3:3c:e4:f8:cd:07:a6:e3:d0:41:34:33:
fd:cd:48:e0:6a:e9:a5:da:ae:d6:21:07:bd:80:7e:
cd:cf:02:e8:1e:7d:29:eb:39:5c:17:06:0d:30:13:
22:f0:93:6d:dd:22:e4:d0:05:e5:fd:e1:61:51:35:
8f:f0:50:cb:1e:d5:2d:b3:24:f7:05:71:c9:64:a3:
94:7c:46:8b:69:d4:0b:15:58:3d:e9:95:6e:ed:1a:
69:df:83:4a:96:53:07:78:47:c7:ae:c8:b6:71:2f:
2a:1e:e1:3a:4a:ab:c7:5e:45:02:ed:2e:94:15:32:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7D:25:12:4C:22:93:42:05:C1:2A:0F:53:C1:0D:DB:4A:FD:59:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60c1e1a6-0534-329e-9bfa-4c1aafaa27be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:95:ce:e3:74:74:b3:ac:2a:7e:5b:b9:29:4d:ba:0e:51:cc:
29:9d:ea:14:fb:71:c4:8b:0c:38:30:d9:27:25:86:3b:ec:d8:
d0:1c:9f:c4:61:5b:b7:3a:34:e4:a6:70:dc:10:b5:0e:14:d7:
18:76:c2:4a:50:4f:65:4b:e7:2f:20:88:d5:74:30:83:b2:e7:
f5:0e:4c:89:02:38:0c:64:9f:3f:58:e1:b9:4d:f3:2e:47:1c:
2b:55:74:0b:01:76:61:2f:36:f9:dc:cd:82:5c:59:bd:ea:ca:
a0:44:de:d3:2c:1b:8e:5c:c4:10:a6:73:de:a1:57:c6:c4:74:
99:2c:82:8c:34:90:96:bd:cf:86:b9:31:35:2e:ef:7e:1d:a7:
50:5f:b2:bb:a9:cc:09:90:53:59:fe:ab:36:aa:49:7f:36:12:
46:d8:5b:88:6e:43:ce:fc:b2:45:ec:f2:59:7e:0d:a5:c2:10:
60:bb:a6:48:f4:c5:4f:83:bc:af:5c:16:78:d1:3d:01:da:70:
f1:3f:70:9e:29:a1:e9:cd:c0:65:b1:f8:bd:c5:76:1d:06:bd:
1d:03:82:d8:50:ad:da:02:64:f2:98:9a:0f:86:b7:d4:42:a8:
90:c3:3a:d9:38:77:04:da:f5:a5:d5:fb:06:8d:84:90:90:63:
89:95:fe:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:18 2025 by rpki-client