Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa
File: 8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa (raw, json)
Hash identifier: MIXTaiy0TUSriNjNmUTnS+lynSTXQzob3yhR1W3qtn4=
Subject key identifier: 93:9D:00:B5:5D:04:04:2C:16:B5:F3:FE:47:DC:29:5A:7D:90:BF:59
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848387C8A10D14297458C5AB080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa
Signing time: Mon 16 Dec 2024 01:43:05 +0000
ROA not before: Mon 16 Dec 2024 01:43:05 +0000
ROA not after: Sun 16 Mar 2025 00:43:05 +0000
asID: 132892
IP address blocks: 198.41.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:7c:8a:10:d1:42:97:45:8c:5a:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 01:43:05 2024 GMT
Not After : Mar 16 00:43:05 2025 GMT
Subject: CN=3d648fef-2d9e-4ef9-a771-c0abe6f5a417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:eb:60:23:ad:71:9e:21:f9:60:19:2f:19:
96:10:9f:de:52:77:90:bb:ea:b0:c8:ad:19:2c:35:
75:cd:ae:6e:90:af:cd:3a:16:6a:02:07:e1:8d:bf:
38:56:75:0e:c2:9c:5b:65:6f:2d:11:21:9d:89:66:
ba:34:52:fc:2e:52:0d:cb:ff:f5:f8:05:d9:1f:74:
6f:5e:2d:fa:9e:6c:f4:a5:73:14:05:c4:3b:a4:97:
b6:b8:b7:09:93:43:7a:1f:f7:d5:91:ae:15:55:bf:
a4:90:a1:1c:9c:f5:82:03:d1:48:ca:3a:fb:57:7c:
5b:19:0b:06:c1:61:dd:42:5b:68:e1:16:2f:be:4d:
0d:bc:03:98:a7:d4:93:37:83:49:0d:98:8c:05:3f:
e9:9c:f1:6b:6c:fb:f3:49:a0:53:d4:2b:e5:f3:91:
a6:30:d9:af:c2:b3:f6:0f:4a:c0:6c:20:ec:ac:aa:
01:72:22:bc:ed:c6:21:a7:8d:ee:83:29:0a:a8:e0:
f9:6e:03:b4:c6:fe:3a:bd:e2:57:d2:2c:38:eb:1e:
43:c5:fa:6b:06:c4:d1:4d:9b:1f:b5:10:89:b0:2b:
96:f9:52:53:41:47:97:73:df:3e:ba:10:8f:7f:e4:
6a:c2:ec:d8:b4:a1:3b:b8:f6:aa:37:fe:1e:32:49:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:00:B5:5D:04:04:2C:16:B5:F3:FE:47:DC:29:5A:7D:90:BF:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:80:78:a0:0b:f1:af:86:7f:3e:5a:91:8a:e0:71:b6:b6:bc:
bb:23:83:d2:ef:98:bf:78:c7:a1:20:26:6f:d8:58:ab:3b:3f:
57:26:61:a8:50:58:65:25:ef:3d:31:6a:73:d5:b0:7a:ca:5d:
6f:13:ea:57:58:0e:ae:a6:c3:9c:b9:cb:26:73:d9:43:03:c8:
a8:2e:1a:bd:b3:da:1b:8a:e8:01:a6:06:90:a5:51:96:27:f7:
5c:26:e2:ad:2b:79:43:00:60:48:7c:c5:0b:9f:12:f1:1d:cf:
b7:05:2c:35:7f:34:9b:08:96:e6:4c:de:00:15:c5:9c:f0:98:
b9:ca:ca:27:cd:ea:00:71:f9:b3:a8:ec:27:b8:2b:ce:dc:54:
c9:df:27:43:df:99:73:c8:34:ba:ea:70:0c:f6:48:27:83:18:
85:4c:7b:10:f9:44:04:74:75:40:9b:67:eb:1a:25:e0:45:2a:
d4:60:67:b5:06:01:6b:dd:f9:06:b8:00:a5:be:ed:3d:10:96:
c7:5c:ea:7f:bc:fb:51:ec:99:a0:b7:70:9b:8f:e5:a9:71:c0:
2e:e1:31:d1:5c:b9:ec:de:c6:8f:3e:6c:c0:55:f3:58:2d:b8:
f1:3a:b0:47:50:5a:c0:8e:42:fc:51:7b:16:64:7d:7c:67:68:
cb:77:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:59:53 2025 by rpki-client