Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa
File: 8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa (raw, json)
Hash identifier: T0+zx07myhazXIXRP/9mjB4Jkwl+C+vl5sD/mmgvVD8=
Subject key identifier: D4:30:B5:02:95:BB:13:EF:52:BB:54:AB:D5:89:EA:75:6A:A7:36:6D
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848143A818914C57AE74F857800
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 14618
IP address blocks: 198.44.180.0/24 maxlen: 24
198.44.181.0/24 maxlen: 24
198.44.182.0/24 maxlen: 24
198.44.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:81:89:14:c5:7a:e7:4f:85:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b5f491c9-8fe0-4fe6-9ee1-d02574a8e0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:1b:b0:f3:6e:12:11:e3:7a:96:84:08:20:
f5:e8:36:00:37:83:3a:cb:17:de:68:2f:4d:a6:93:
5f:62:db:e9:d5:13:fc:56:8e:9d:35:4c:a6:a6:07:
f4:b6:41:8f:57:d5:35:49:35:3d:0c:58:a6:e7:be:
51:47:a8:ba:6c:7e:7f:11:4e:0e:13:07:2b:83:be:
68:41:98:1c:47:ed:48:24:12:ec:ce:b3:b1:19:13:
f1:fa:3a:d8:dc:99:93:ca:72:02:33:aa:8d:68:59:
f4:72:0b:5b:56:af:9d:22:54:dc:ff:5a:ff:21:76:
8d:ed:dc:ef:31:26:8f:dd:5a:f1:3e:f1:f7:3c:2d:
47:32:e9:be:76:9c:08:a9:ff:20:2d:0f:34:8a:c4:
fa:5d:2e:ec:01:a0:87:8e:eb:0f:ac:6e:0f:e5:d3:
f5:d9:e8:4f:6d:df:7d:de:7e:79:e9:36:63:17:b8:
df:66:65:50:99:46:0f:4d:df:64:fd:64:8d:1d:41:
73:89:d5:c3:ec:f2:ef:18:9f:53:34:cf:84:4f:63:
67:6c:39:12:72:eb:0d:69:3c:1f:c7:4f:81:18:6f:
3d:76:23:d3:ca:df:de:5c:ba:89:db:61:15:05:7c:
91:78:68:db:f7:2d:ec:a1:d0:fc:6e:d0:a2:d0:0b:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:B5:02:95:BB:13:EF:52:BB:54:AB:D5:89:EA:75:6A:A7:36:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:e0:57:0f:96:bc:fa:8c:77:6d:9e:a9:18:47:d6:5e:38:4f:
b4:67:1c:05:8e:1a:dd:6b:a1:12:80:6a:cc:93:8d:be:84:db:
61:9d:59:54:3a:a6:12:c9:83:21:ae:7f:14:89:a9:e1:71:38:
13:97:89:26:ee:90:b7:ba:59:e4:f1:69:32:17:87:b0:77:ea:
10:79:e1:7d:8b:4a:fb:4f:66:09:7b:f7:55:87:54:9a:da:69:
0d:08:a2:b4:c5:07:52:9e:29:77:e9:c1:02:d9:47:61:6d:2b:
0a:13:b6:4b:dd:a8:cd:4a:0f:e7:40:78:d3:0d:05:00:77:7b:
e5:ac:fb:c0:b3:6b:b1:29:b7:3e:78:12:92:e2:d5:e7:03:64:
fe:9d:48:1b:7b:a6:60:20:87:b4:b0:95:55:6a:c0:20:a3:33:
e6:25:f7:3e:7c:90:3e:76:6f:bc:39:d2:39:7b:93:57:5c:a8:
13:e6:85:b6:e9:8d:4b:7b:1c:57:c8:de:d7:4f:4c:ae:d8:ad:
75:fd:0b:39:ec:96:bd:98:7c:34:24:30:c6:5b:a4:b1:cf:33:
80:ad:b1:d4:73:41:4a:46:9e:a5:18:78:70:cf:a3:d1:61:dd:
79:87:94:e2:72:c4:57:31:18:0d:3d:8a:d8:62:a8:1c:4e:5e:
88:5a:a3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:08 2025 by rpki-client