Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d297548f-44bf-3a12-a448-076546bf293e.roa
File: d297548f-44bf-3a12-a448-076546bf293e.roa (raw, json)
Hash identifier: jbJ3lzi8YXQF4BcnQ29lG4Var6+crd9La83SEGwoM+E=
Subject key identifier: 7B:F6:BC:2C:A3:CC:2A:7A:93:94:72:E2:0F:F8:9B:D5:FB:16:C5:75
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305AD1BA611FE642F68BAAC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d297548f-44bf-3a12-a448-076546bf293e.roa
Signing time: Fri 13 Dec 2024 03:48:41 +0000
ROA not before: Fri 13 Dec 2024 03:48:41 +0000
ROA not after: Thu 13 Mar 2025 02:48:41 +0000
asID: 13335
IP address blocks: 198.41.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5a:d1:ba:61:1f:e6:42:f6:8b:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:48:41 2024 GMT
Not After : Mar 13 02:48:41 2025 GMT
Subject: CN=3cbf3633-990c-412d-bcf5-98ad8d397952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:cf:69:cb:ce:7c:d0:6d:0e:bf:52:b9:8d:
f5:2a:59:59:54:e3:ed:ad:83:d1:35:82:eb:5e:54:
3d:6f:c5:30:24:6d:17:3b:2f:fb:9d:d6:20:6d:c6:
46:ed:6b:ae:d1:f1:74:2c:af:ef:69:76:7d:7c:bf:
e4:5c:10:42:5b:58:fc:24:dd:e5:cc:8f:93:cb:ef:
ff:e9:18:21:94:c9:48:b5:74:a2:be:bb:4f:f0:39:
f7:ab:9d:ca:3c:52:97:1b:0a:ec:c6:a6:b7:12:5e:
c5:87:88:32:53:4b:e1:03:8f:a8:54:90:ad:2b:b8:
ea:88:66:9b:ce:bd:e1:4c:bc:99:c1:7a:89:d4:78:
9d:ba:01:16:12:6b:6a:9c:d9:72:ec:68:aa:6e:1c:
25:8b:32:fd:38:d2:74:5b:2b:19:78:66:6f:fb:9d:
be:42:18:ba:b0:dc:2f:9e:e2:a0:e0:37:ff:45:91:
cd:b3:ae:9d:ff:7b:13:5d:ee:6d:1e:aa:f7:a7:9f:
09:f8:44:64:f1:95:aa:6c:59:4b:70:88:b4:a6:26:
c6:14:2d:21:91:c1:9e:00:b7:a0:49:39:ad:86:a1:
19:a1:1f:2d:60:fc:03:0d:19:d4:7a:f8:17:b7:b2:
cf:8a:1f:7c:38:ea:4f:48:e9:3a:f5:25:7a:95:b0:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:BC:2C:A3:CC:2A:7A:93:94:72:E2:0F:F8:9B:D5:FB:16:C5:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d297548f-44bf-3a12-a448-076546bf293e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:2f:15:25:14:cb:e0:7e:46:29:4f:6b:6e:45:71:51:a1:d2:
c2:98:c1:46:1d:5a:d0:cf:ed:57:90:87:c2:65:03:f4:d5:72:
7c:a0:d1:2e:9c:f5:ad:ef:f7:99:05:46:1f:a4:19:33:8f:ab:
f0:e2:40:b3:16:e6:2d:58:e6:83:0c:c0:ab:1b:e3:74:e8:d9:
60:6f:bf:2a:fd:25:30:be:35:fb:ec:43:27:b8:21:2e:e8:29:
31:b9:d7:9e:67:d4:d1:4b:20:de:4e:46:2d:b5:aa:ce:14:cc:
d1:60:a3:2f:c5:eb:b0:47:ef:f8:a5:fb:38:1c:7a:b9:03:5b:
e7:6b:d8:7c:c1:7e:42:db:4d:3e:2c:74:36:db:3e:f2:98:83:
a4:b2:a9:de:8b:a1:64:1d:fb:55:33:01:2d:37:7d:3c:2c:25:
f6:8a:b6:65:36:a0:c4:58:33:1b:9d:66:cb:36:75:1e:e6:3d:
bf:7a:cb:18:e9:ac:6d:c7:cf:c8:63:00:bd:26:8c:e0:db:39:
14:4c:40:15:90:2e:42:ab:0e:ab:de:fc:44:b8:3b:b8:bb:71:
48:2b:50:95:9b:ba:9f:55:12:34:d4:82:06:84:12:42:f1:f4:
4c:bc:48:b6:5d:d9:cc:0e:30:43:b4:04:21:08:5d:42:a9:76:
17:4f:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:01 2025 by rpki-client