Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be3b984a-4dcf-3fb0-809d-91f49ca0bc53.roa
File: be3b984a-4dcf-3fb0-809d-91f49ca0bc53.roa (raw, json)
Hash identifier: KICeqZMMunAQRnx4KOwSV9/lhTWKUNSgL8gQ5Xgaaw8=
Subject key identifier: 94:70:08:FC:2D:B7:B9:3B:31:F9:27:1F:34:93:B9:9A:25:14:62:7B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305CF0728D0978693CDE8940
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be3b984a-4dcf-3fb0-809d-91f49ca0bc53.roa
Signing time: Fri 13 Dec 2024 03:52:57 +0000
ROA not before: Fri 13 Dec 2024 03:52:57 +0000
ROA not after: Thu 13 Mar 2025 02:52:57 +0000
asID: 13335
IP address blocks: 198.41.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5c:f0:72:8d:09:78:69:3c:de:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:52:57 2024 GMT
Not After : Mar 13 02:52:57 2025 GMT
Subject: CN=4384349c-bf34-456e-9dce-0536743aea4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:5d:d0:ce:a2:86:a1:88:52:45:ba:83:e2:
74:b0:53:32:28:ad:09:ae:2b:25:05:8a:04:fd:db:
93:27:c1:ea:7a:9c:59:1c:cc:9d:02:a2:54:dd:54:
ca:d8:25:dd:f5:5f:81:2f:f8:a3:d0:8e:17:0a:05:
d3:cd:bf:9a:bf:86:86:e3:02:6b:94:d2:e9:b8:65:
65:59:6b:bf:8d:32:fe:dd:a9:6c:1f:a0:40:36:81:
db:03:cb:13:a8:02:c7:c8:25:cb:dc:b0:1d:c8:56:
bd:8e:7b:d9:25:c8:9f:dc:24:70:3b:55:75:e3:9b:
60:f6:34:53:1e:aa:2d:88:87:0d:73:29:2a:b0:f9:
c0:b2:1e:9f:13:c0:4b:19:4f:03:00:99:f2:73:50:
37:23:53:0b:26:ac:60:65:67:49:59:97:ba:5a:f4:
cd:0e:8e:22:c5:2e:3a:61:47:97:d4:a3:fd:1e:01:
31:f8:fc:80:95:9c:9f:f9:a3:31:d9:f1:49:11:c7:
1e:70:51:7a:c2:19:ce:a5:32:11:3f:7f:0e:5c:69:
8d:09:20:f4:7e:d6:ee:c2:e9:2e:60:d3:24:97:d1:
c1:94:c4:4d:ff:66:63:02:91:93:c5:8f:8c:4c:3d:
2b:44:21:1f:86:85:87:3e:7a:2a:9b:7d:6f:88:05:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:70:08:FC:2D:B7:B9:3B:31:F9:27:1F:34:93:B9:9A:25:14:62:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be3b984a-4dcf-3fb0-809d-91f49ca0bc53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:2c:43:6d:b6:de:62:59:3d:f1:10:4d:60:88:e6:e2:bd:e0:
e7:b8:48:01:c2:ce:32:b6:38:c7:a9:08:88:84:c2:10:68:5f:
05:76:37:dd:30:e4:e0:f0:f3:29:a2:e0:3f:e6:8a:10:5b:ac:
3f:15:e5:33:d1:6e:0d:3b:ae:4a:17:e2:24:54:44:b0:ab:a4:
ea:19:45:0e:a3:47:e5:01:18:cf:4d:44:d1:d8:db:66:e7:d9:
96:cd:4c:bd:98:0e:85:dc:ef:53:bb:78:76:86:66:0e:a2:ed:
e3:c6:9f:c7:37:d2:ec:51:86:ca:ae:0d:50:d4:99:b2:13:7f:
14:97:ff:55:06:23:e6:29:64:cc:f4:d1:32:ad:96:e6:c4:fd:
c1:c0:eb:22:0c:be:d2:9d:c7:ca:94:0b:15:63:2a:7d:64:80:
84:b5:f9:4e:22:86:1c:02:94:db:1d:18:98:55:0e:98:1b:f8:
a2:80:42:c1:c3:d5:5f:6c:a1:3f:99:03:ff:e2:e3:21:72:17:
51:cc:7b:a4:e3:89:37:27:c9:72:ed:6a:d8:75:30:e9:2d:ad:
59:dc:d2:e4:da:d8:0a:65:39:c0:a9:8a:68:96:6b:ae:3c:d8:
c6:f0:7e:28:2d:c7:a2:44:cf:d4:ff:08:e5:e0:cd:2c:16:66:
cf:d5:2c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:08 2025 by rpki-client