Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0856a966-01ae-37fe-8009-b52a5f3f3096.roa
File: 0856a966-01ae-37fe-8009-b52a5f3f3096.roa (raw, json)
Hash identifier: gYAoTmAKAOP9De+o/yEIet0DsQOcbwzagna3IyELnRY=
Subject key identifier: AF:BF:0C:8E:A8:5D:55:91:86:99:5C:04:70:B7:2F:FC:B8:17:6E:1A
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F432858487325BD099108E80068BB0100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0856a966-01ae-37fe-8009-b52a5f3f3096.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 7029
IP address blocks: 198.20.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:bd:09:91:08:e8:00:68:bb:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=3b3800a1-e4fb-466e-9a8b-4ad09217847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:3d:d1:19:14:ed:16:ab:bc:e1:18:26:7a:
96:78:d6:4b:36:3a:c7:e6:a0:59:6e:ad:4c:46:4f:
4a:70:36:1e:f6:f0:87:e1:cd:df:72:f4:91:0f:f8:
92:81:bd:80:68:40:d6:29:9a:45:35:dd:9d:93:41:
eb:49:f4:f5:b7:94:26:15:1f:42:a1:24:19:2e:d5:
52:fa:f1:c5:ca:13:a8:40:ff:a3:aa:46:4a:f1:03:
d5:57:9c:71:d8:e3:6a:0a:65:94:79:75:c7:66:b6:
6a:d3:70:73:ad:a1:50:b6:e2:e6:84:50:e0:4c:d2:
24:79:a6:94:00:0d:57:cb:8c:0a:2d:4d:20:f1:e9:
af:a8:c8:45:c4:2f:81:13:57:3a:ba:1d:ca:cb:92:
3a:57:42:f4:8c:0f:51:28:08:56:90:fe:ab:bc:e2:
39:62:67:fd:fa:4e:fc:5d:4f:52:21:1a:af:99:92:
8e:fd:32:5e:6d:ea:33:cd:81:08:11:2e:4f:be:64:
cb:05:4d:35:d6:10:36:60:9f:c9:f7:74:88:8b:4f:
39:43:f7:c6:6c:57:ac:f4:3a:21:dc:44:4a:25:c7:
7b:f5:6e:91:67:dc:27:45:ec:dd:13:6b:cb:68:2e:
0e:d9:cc:f0:01:12:29:80:2a:2e:3f:83:a8:9a:e6:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BF:0C:8E:A8:5D:55:91:86:99:5C:04:70:B7:2F:FC:B8:17:6E:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0856a966-01ae-37fe-8009-b52a5f3f3096.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.20.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c1:8d:b9:af:ec:d2:4b:ce:c5:72:f5:4e:1e:f3:f9:2b:49:
33:29:a7:bf:59:cf:60:5a:6d:d4:de:1b:20:2d:4a:af:74:87:
58:a0:b1:24:43:3a:08:84:af:d5:3f:5b:7d:fe:17:d9:af:c9:
4c:b6:3c:33:9c:62:2e:bf:4e:62:76:94:28:11:26:81:a0:4d:
87:18:b3:1d:3f:2f:0c:7f:9a:74:38:27:dc:c1:13:34:6b:9f:
86:89:5e:c6:6c:df:b1:47:72:c2:1b:5a:c8:95:73:77:a3:54:
c5:31:9c:71:81:75:fc:b9:8b:4f:97:bd:36:e0:f8:02:3b:6a:
8d:8c:7f:14:4b:ef:67:fc:27:bb:5f:31:3e:28:ae:e9:d3:eb:
36:d4:1d:df:be:dd:14:03:82:ac:56:e6:d8:12:fa:ed:69:b9:
a2:26:da:6b:d9:98:59:7d:1e:a8:ea:d9:6b:75:ff:47:25:c6:
37:30:ab:18:42:2b:8b:42:03:bd:7e:c7:19:fd:9d:63:81:86:
14:4b:73:0d:cb:29:e6:68:dd:d7:18:e1:53:a3:bc:d2:e1:77:
d2:ca:52:d8:0e:94:1a:11:58:41:63:0b:65:1c:e2:e0:bc:8b:
7c:84:d8:8e:d0:2a:60:92:83:8e:7d:96:af:cd:b0:dc:9a:d1:
a4:f7:53:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:54 2025 by rpki-client