Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa
File: 38b13889-d80f-38c2-bade-6634f5978a7c.roa (raw, json)
Hash identifier: fuq+57lJgv1vVAsGUgiE2OgLIEY3YXXVjLocyGYUFoc=
Subject key identifier: A3:E0:91:51:4F:9C:B2:D1:CE:B6:22:F3:27:F8:78:E9:3F:EE:BF:40
Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a
Certificate serial: 010D0C9F4328584804DFBB51C17C0512DC0D7EE0
Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa
Signing time: Wed 27 Nov 2024 14:00:52 +0000
ROA not before: Wed 27 Nov 2024 14:00:52 +0000
ROA not after: Tue 25 Feb 2025 14:00:52 +0000
asID: 16509
IP address blocks: 198.99.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:04:df:bb:51:c1:7c:05:12:dc:0d:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a
Validity
Not Before: Nov 27 14:00:52 2024 GMT
Not After : Feb 25 14:00:52 2025 GMT
Subject: CN=92a6fdc9-a6dd-4c86-8613-cc1f050b8f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:ee:47:22:0d:eb:ec:7d:89:0c:cf:60:ea:
a2:b5:36:1b:9b:89:7d:cc:1c:fb:8d:c2:75:85:3a:
fa:55:28:23:85:5b:a4:8b:8e:08:be:52:a0:8f:53:
d8:33:24:9b:fa:48:93:fc:77:78:8f:e0:42:c2:3a:
3d:d7:8a:e8:32:57:71:de:0e:d4:f0:93:3f:fd:66:
79:15:47:f2:d9:52:1e:d6:75:56:21:79:86:1f:8c:
09:11:4f:ab:ee:b5:4b:ea:fe:81:40:92:fe:d7:67:
dc:8b:8c:56:80:4f:e9:b5:0e:00:b8:7e:ed:f8:02:
0d:9e:17:d9:b0:06:ed:a2:48:f7:1d:4c:a3:9e:cb:
92:19:1e:99:09:79:b8:47:0f:0b:82:a3:01:c9:ab:
1a:c7:e3:e9:e1:55:ff:db:6b:9a:39:c3:3c:1f:5a:
c1:82:b4:6f:1f:4d:51:0c:90:e5:0e:ac:35:c0:76:
9f:9b:ef:db:58:03:c4:10:a1:e5:71:fa:67:be:61:
03:db:cb:50:e7:13:7e:c1:fc:ca:29:00:43:15:26:
c5:48:28:86:3e:fc:cc:26:d3:f6:95:df:7a:77:f3:
3a:b3:7b:ef:31:69:3a:63:05:f6:7b:d6:ff:bc:bc:
c8:cf:ab:e7:4d:c7:dd:fc:e7:27:48:6d:7a:63:45:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:91:51:4F:9C:B2:D1:CE:B6:22:F3:27:F8:78:E9:3F:EE:BF:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl
X509v3 Authority Key Identifier:
keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:3f:24:8c:a9:27:1f:07:7d:50:12:e6:02:45:e8:03:5e:cc:
05:14:9f:b1:d5:4b:1c:43:ab:a7:3b:2a:91:c2:d7:09:a4:c9:
d6:bc:99:8a:29:59:25:73:93:c0:0d:40:f0:47:e1:97:fc:46:
03:4e:3e:57:33:b8:31:ec:7f:6c:89:0a:b6:c7:5f:a0:13:10:
46:90:ad:97:84:2f:27:90:b5:12:2f:6e:f2:99:89:0b:22:c4:
92:a2:f1:e7:1c:75:93:b0:bc:5a:e6:4b:16:de:bb:07:66:1d:
80:5b:e9:50:62:cd:b7:57:62:e3:5a:83:c0:cf:14:36:64:83:
a6:85:b6:c9:bc:b4:31:cf:36:90:b0:28:ef:a5:5b:7e:c5:ef:
08:5f:aa:48:7c:57:b2:62:05:9f:44:67:55:86:c4:5e:f5:9f:
66:0c:ed:58:13:ea:bc:40:21:55:c9:b3:89:8c:df:e8:1b:8c:
d1:5f:85:25:08:69:14:4a:94:cb:b6:e8:bc:29:d8:2d:d4:a1:
76:45:a2:2b:18:d7:84:25:83:12:43:36:77:65:a5:41:63:56:
45:61:3c:de:eb:28:7b:db:0c:7d:93:01:87:ed:41:02:b5:52:
9f:c2:b4:bf:a7:35:1d:a2:b5:a9:80:8b:f4:15:11:0f:f9:c1:
8d:29:59:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:39 2025 by rpki-client