Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa
File: 309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa (raw, json)
Hash identifier: 8qyfc7WJLjp1QJzY4LsGQ6ZRk5uUYX1MehgaJHILtFk=
Subject key identifier: 7E:F0:CB:0C:54:0F:33:CA:44:2D:AB:47:3F:46:11:68:A3:65:CD:09
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848143A8198C902B3DFEC0B4E60
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 16509
IP address blocks: 198.44.180.0/24 maxlen: 24
198.44.181.0/24 maxlen: 24
198.44.182.0/24 maxlen: 24
198.44.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:81:98:c9:02:b3:df:ec:0b:4e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=17d0b88f-b20a-4fe9-beee-45a010630347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:a8:e8:70:91:63:97:d7:ec:ca:31:a6:3c:
a1:6b:1a:cf:66:73:0c:77:a6:e5:3f:32:09:b4:32:
80:91:6b:4f:e0:e6:7e:81:ce:b9:fd:0b:29:f3:38:
f0:09:51:56:b0:13:bd:13:c1:e4:4c:41:48:80:d9:
44:06:f0:86:4f:de:5a:f7:03:bd:86:4f:6b:d1:a3:
31:e7:56:7d:76:4d:f4:00:d4:01:ce:3c:eb:0d:48:
7b:01:76:f8:42:f4:ac:6f:5f:3f:44:8f:28:57:b4:
70:a5:cc:27:57:38:75:a1:e0:43:aa:dc:88:b6:59:
20:f5:88:71:ee:1c:ae:6b:0a:9b:34:96:5e:34:a1:
a1:c2:78:f6:fb:48:53:18:1a:98:ef:c9:31:27:df:
4f:07:3e:76:6b:92:67:88:a4:56:80:38:d1:67:17:
99:2e:cc:da:41:b6:5d:09:02:3f:92:27:6f:64:f2:
b4:19:59:f5:d2:bf:84:6c:81:27:2d:9b:82:62:d9:
8d:54:5d:00:63:30:00:ec:29:43:57:29:4f:ef:69:
27:19:59:01:85:84:c1:5a:54:05:9f:82:a4:6f:62:
b1:d3:84:04:5b:6a:57:16:bc:e1:13:7c:6e:db:e7:
3a:1f:55:49:e5:6a:a5:61:71:e2:55:70:8a:b9:58:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F0:CB:0C:54:0F:33:CA:44:2D:AB:47:3F:46:11:68:A3:65:CD:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:a0:0b:5e:1f:62:aa:4e:76:35:95:e3:ce:a9:a4:cc:e2:09:
a1:00:0e:56:61:bc:2d:60:83:68:3d:6a:69:81:27:66:c7:eb:
db:8f:d3:cf:36:ad:9f:e6:b1:e8:e1:3f:d0:6c:87:db:e6:de:
d9:51:f7:b9:e5:07:e6:27:c9:5f:ab:a7:c2:ec:28:17:39:1f:
a8:98:28:73:65:fc:19:f5:83:0c:16:5b:39:63:07:e4:2e:65:
16:82:3f:40:6f:6d:a6:1f:a2:e6:c7:fa:e7:72:72:42:08:f6:
13:f1:b8:b0:b8:f2:97:8b:5d:6c:45:e4:f2:67:6f:50:20:d7:
60:66:38:39:7f:70:a0:b2:eb:a2:f7:93:74:b7:90:50:44:f9:
e3:12:47:f8:64:ab:bd:46:9d:1e:2a:e0:9e:c7:9f:82:20:e5:
3d:77:69:4c:7d:88:b5:f9:16:b8:90:29:b4:c8:09:4e:7d:33:
11:49:9d:75:84:2c:66:b3:c3:b7:c4:33:1b:e1:52:4d:e0:d0:
f5:88:a9:a2:e4:63:e5:31:24:0c:87:7d:93:bf:ff:02:30:f2:
84:0a:9c:3e:db:8f:17:6b:66:86:fb:93:66:25:86:84:7a:85:
36:88:94:e7:b4:0e:b5:b9:91:b4:90:9b:02:fa:66:75:ba:ba:
76:66:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:31 2025 by rpki-client