Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/29a955ce-5759-3b14-b6e2-a31c4567f553.roa
File: 29a955ce-5759-3b14-b6e2-a31c4567f553.roa (raw, json)
Hash identifier: x/t0pTwQAzrCDRLuDsKxV5p3UmvDKvZTLofQ0AmHANc=
Subject key identifier: 0D:F9:BE:96:B8:44:C6:B4:A9:C1:CD:9F:67:97:BF:8D:17:E0:8A:FF
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F43285848A830A80C8D9F3AF86AD92A80
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/29a955ce-5759-3b14-b6e2-a31c4567f553.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 1239
IP address blocks: 198.68.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:a8:0c:8d:9f:3a:f8:6a:d9:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=fa311868-7315-47a7-aa59-b2e3c2074b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:cb:d6:d7:e0:8b:23:9c:11:8a:57:f0:e2:
67:01:76:d7:bd:e4:5c:10:61:65:71:9a:6a:ce:05:
01:70:57:73:00:66:10:ef:6c:14:92:3c:4b:83:52:
29:9f:92:40:ba:13:a6:48:89:64:5c:bb:30:b8:c7:
3d:e9:4b:ab:74:86:38:4d:7c:7f:de:ab:01:fd:35:
51:ea:42:98:76:ff:58:0e:a1:58:8d:6a:82:6f:af:
17:a9:6e:6d:b4:b8:3d:bb:ec:50:e5:e7:b2:ec:6a:
06:d0:72:ce:7c:62:31:66:b7:eb:43:33:09:b9:00:
dc:a0:be:91:eb:d8:ef:53:e7:39:b5:42:fe:f8:f3:
ab:0a:86:03:43:43:bc:41:e1:67:f1:c4:1d:25:14:
cf:2b:cf:d1:5b:9b:d4:fe:c9:ec:e6:f6:51:7b:0c:
63:33:20:54:f1:29:06:6a:17:fd:b7:c0:11:12:ee:
f8:5f:0d:dc:d3:8c:bc:3b:08:34:3d:bd:41:4a:05:
2a:fe:fa:85:c5:d3:b0:6c:b2:4e:1d:30:8b:97:2e:
f3:c2:86:ad:6e:11:7a:69:e1:38:4a:f7:8e:d8:8d:
05:3f:56:5b:3d:48:1e:a4:b9:bd:10:1d:b1:74:f9:
17:6f:33:31:f0:7b:82:c3:a3:d2:5e:74:f0:05:2c:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:BE:96:B8:44:C6:B4:A9:C1:CD:9F:67:97:BF:8D:17:E0:8A:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/29a955ce-5759-3b14-b6e2-a31c4567f553.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.68.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:e4:b2:33:35:64:48:c1:8a:32:0c:e7:8c:66:87:27:d9:ee:
ec:83:0a:6d:da:8a:2e:f8:b4:2e:a6:e9:d6:3b:c7:0d:ae:56:
56:73:fc:7c:27:67:41:53:99:35:58:3a:af:4c:ce:e4:9c:4d:
2f:a5:b9:10:3f:5c:b1:e6:58:2a:35:93:7a:1d:88:4e:3f:08:
e6:95:0f:37:bb:3e:33:65:a7:b9:23:4e:2b:c6:64:d2:64:48:
b9:ab:aa:05:a2:4a:d2:df:88:96:33:23:06:97:8c:06:b6:ac:
01:85:0b:1d:d5:51:ef:5f:c9:1c:fa:19:ff:64:ee:8d:21:af:
61:5b:7b:63:80:8e:a2:f4:3c:11:1d:d7:26:2e:5b:8f:98:c7:
94:46:0b:bf:09:a1:50:50:bf:77:19:93:93:30:5f:b3:7d:87:
c6:1f:a6:9a:36:73:1a:06:af:81:9e:17:61:39:f6:8a:47:11:
26:e7:93:8b:f4:c6:36:d6:c2:0f:1d:51:46:d5:dd:7a:19:52:
ac:5c:32:58:dc:0d:5d:43:2e:3d:2a:d6:3b:65:24:ee:87:db:
eb:f3:78:f2:03:da:05:81:95:9a:46:91:68:d5:39:93:4c:5d:
1d:33:5e:a5:83:04:0b:af:e3:43:27:af:7b:a4:30:ef:9d:2a:
27:79:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:34 2025 by rpki-client