Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa
File: 5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa (raw, json)
Hash identifier: U5bG4Mu2uuwrqaAz9s9/EBM8EshWjOwg9n5DKxgfbUk=
Subject key identifier: FC:60:6F:94:52:F6:E1:AB:CE:18:84:73:7D:49:4E:E3:BB:73:ED:75
Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Certificate serial: 010D0C9F432858484EDACAEE45AA2CCA387293C0
Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 399409
IP address blocks: 198.203.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:ca:ee:45:aa:2c:ca:38:72:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=1a7a48b8-c543-452d-8978-f8cfde980f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b7:d9:0e:3d:9f:00:ac:33:50:2b:95:f6:68:
97:f8:ae:25:84:3c:2a:cc:c3:1a:1a:a9:06:b4:c2:
45:f8:8c:46:18:f7:50:29:80:6f:e0:38:f6:af:f4:
cd:db:00:3d:60:1e:91:bc:d6:c1:82:15:86:f1:5b:
60:21:20:d2:d0:ec:fb:f6:81:13:b9:73:a4:05:39:
88:ab:3d:e0:d9:3e:c7:a0:6c:38:e9:ac:f6:8a:d5:
33:21:e1:4f:4a:af:66:18:b0:02:4f:90:50:b1:fd:
eb:a2:8a:4b:f9:8b:c6:35:36:8a:40:bc:aa:56:99:
51:da:3b:d9:81:2d:73:12:00:e3:10:76:b1:59:01:
51:2e:3c:64:c2:c7:74:57:88:b3:4d:a4:61:fa:bc:
07:11:2f:bc:59:fe:91:ff:d8:e4:a7:fd:df:e0:09:
55:62:f8:02:63:6d:d5:ea:25:79:8d:f3:59:fe:47:
35:f0:f8:f9:e1:56:4b:e6:0c:b3:dc:7a:f6:84:28:
5c:88:e8:10:d4:82:a9:48:a2:15:fa:e4:a9:66:85:
a5:d6:d5:7e:c6:95:37:1a:3a:47:66:0e:6d:16:a0:
22:35:1b:74:22:30:f9:1f:7a:d3:7a:e1:5b:fb:b4:
90:d8:96:23:3e:13:a6:24:5d:bb:15:eb:23:06:61:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:60:6F:94:52:F6:E1:AB:CE:18:84:73:7D:49:4E:E3:BB:73:ED:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl
X509v3 Authority Key Identifier:
keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.203.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:a0:54:c3:1c:07:b3:9b:32:75:9e:a3:0f:42:4b:ea:d0:4f:
bc:67:50:17:d6:87:aa:00:df:af:79:b4:06:26:6b:89:fe:2b:
ca:24:7f:31:43:2c:19:a6:90:33:c4:77:b2:73:63:4d:11:9a:
6f:e3:fe:9c:dd:d5:c4:0e:01:9b:0a:c0:45:82:42:eb:6c:92:
c2:28:93:38:c7:98:3c:7b:b5:56:f7:4f:db:92:44:c2:59:c5:
6c:67:bf:b2:3d:9a:3b:74:7a:f4:a0:ce:f1:3f:56:5a:7f:c4:
f5:24:52:8f:c0:d4:99:46:34:a3:23:b6:33:4e:dd:19:a0:0c:
d5:88:f1:29:2a:b8:23:ea:46:bf:27:d3:2b:68:bb:17:94:d3:
17:a5:42:d3:cf:1d:57:a2:49:ff:e6:47:1f:49:b1:40:54:46:
b5:68:d2:ab:f6:a5:30:a5:89:7c:0b:df:91:d8:56:42:7a:af:
ec:00:7a:5f:55:77:bc:3b:ba:6c:be:6b:9d:9b:7a:c8:03:55:
e7:92:05:95:75:b7:c5:f2:ba:16:43:f6:ea:24:04:95:25:57:
fc:2e:65:13:1c:2a:b8:b4:8e:30:72:87:17:38:85:62:89:81:
52:7d:f2:e6:6f:54:d9:a9:5e:ee:89:3a:c7:a1:53:42:3a:e9:
e9:35:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:27 2025 by rpki-client