Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa
File: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (raw, json)
Hash identifier: jXisFqR3yfgbju6GDf+gBbxjpfWxJ4HhbibX328AiOo=
Subject key identifier: 2D:61:78:E2:A4:EA:FC:30:28:EA:CF:5B:77:DB:3F:29:81:F6:EC:0E
Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a
Certificate serial: 010D0C9F432858482A8FE05AB6ED3F1CEAEF2280
Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 40583
IP address blocks: 198.236.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e0:5a:b6:ed:3f:1c:ea:ef:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=5ab22097-3832-4c0f-af45-131a82a5e83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:a6:e7:0f:cf:21:21:7a:d9:d3:ee:46:28:
ba:41:dd:a2:0b:1f:8b:50:62:4c:fb:bf:02:ce:de:
91:b5:76:3c:80:cd:79:d5:f3:36:bd:be:ca:af:8c:
e4:b1:35:1f:10:3d:31:e4:4d:d0:90:9f:b5:d2:7a:
94:3c:03:02:91:12:98:cf:45:33:3c:2e:07:b3:c8:
44:27:c8:06:8c:0b:bf:ed:28:94:5a:cf:cf:5e:10:
5f:e5:30:a4:db:3f:42:e3:7b:79:e5:0f:bd:d8:43:
f0:21:de:d3:7f:3a:de:14:6f:44:ca:17:81:8e:d5:
f2:b5:73:6a:ec:e0:e8:56:cb:93:69:79:22:13:2f:
13:9b:29:fb:f6:ac:6f:70:73:37:5b:3e:6d:0b:ca:
3e:86:78:84:f4:9f:f4:83:86:4e:ad:87:e1:10:bc:
b2:3e:c2:11:8a:d3:7e:32:c6:8d:07:46:b8:ac:9b:
ed:13:6d:75:dc:1d:61:dc:18:62:fe:9e:1c:14:b9:
bf:f4:ed:38:a4:40:9b:14:af:bb:54:3a:84:a6:65:
9d:63:5b:31:73:9a:d5:79:62:11:e9:8c:dc:c2:c8:
f0:77:a7:f4:e0:ed:40:b8:81:8b:33:7a:92:b5:aa:
23:09:c2:87:9d:b2:20:f4:7d:d3:bc:e8:12:fe:f9:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:61:78:E2:A4:EA:FC:30:28:EA:CF:5B:77:DB:3F:29:81:F6:EC:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl
X509v3 Authority Key Identifier:
keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.236.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:db:2c:56:f3:d8:61:64:f5:af:f2:5d:48:d2:e6:84:b4:aa:
26:21:15:6c:6f:c2:c7:d0:42:ea:12:58:f6:62:bb:e8:78:99:
37:26:f8:4e:2f:b1:aa:4d:ee:39:eb:52:1c:b0:8a:cf:b2:c0:
d5:23:8e:08:31:69:ed:d3:1e:84:00:fc:a9:64:dd:cf:ea:5d:
97:7f:f7:a2:81:29:50:d0:bb:05:55:55:23:a7:37:99:55:b9:
77:38:ef:45:80:f3:26:ab:6a:17:5b:2c:31:a7:84:02:71:68:
69:a1:52:f1:52:59:5b:87:2c:fc:87:99:b6:39:48:0a:ce:76:
f4:77:11:bc:b4:e0:ee:95:36:b9:bd:02:a0:83:06:6f:b5:b2:
52:d2:50:d9:09:4e:d6:b3:44:3a:58:ea:7f:8f:c7:a3:38:0f:
36:09:10:43:78:b2:d7:3d:74:5e:8c:2d:13:af:0e:1c:2d:d0:
5e:98:d4:c2:6a:87:de:51:1a:b6:8e:17:63:44:1d:af:7a:38:
be:9a:8f:2c:84:17:62:e0:5c:6c:99:f0:72:eb:2b:98:f0:c7:
30:cd:0a:de:60:23:48:25:88:11:6d:39:b8:1b:ee:70:99:70:
9f:e7:56:04:2e:e4:ed:95:a9:e6:d5:41:d3:58:c4:c2:fc:9b:
6e:54:7b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:04:24 2025 by rpki-client