Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa
File: ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa (raw, json)
Hash identifier: b7ngd+X7VItG3F7hNhIkhpRgHJEfm4rh5M2KCmLzC08=
Subject key identifier: 64:FA:C7:DB:14:6D:13:CD:E5:24:A5:BD:BD:15:41:8C:10:03:BC:F0
Certificate issuer: /CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4
Certificate serial: 010D0C9F432858489E6B6E728F46EB6CDE340A80
Authority key identifier: 60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 40910
IP address blocks: 198.205.16.0/20 maxlen: 20
198.205.24.0/21 maxlen: 21
199.119.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:6e:72:8f:46:eb:6c:de:34:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1df85fc3-4ddf-4852-9f7f-f5bf8c954e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:89:52:b5:a3:ff:fe:a0:10:39:af:b0:9e:
52:c0:76:1e:5a:df:5b:ce:90:ee:b9:20:a3:d1:b0:
c1:8a:a0:5e:f3:1c:4b:b3:23:8d:1d:b1:3b:a6:b9:
e5:5b:bf:80:26:d8:71:b6:c4:a4:50:b8:28:85:56:
fd:ef:44:1e:41:d1:ee:db:96:11:65:ad:ff:59:e2:
94:a1:72:cc:14:27:09:da:f8:a9:d3:00:03:9d:e7:
6a:b0:a7:4d:d9:c9:41:e6:3c:a0:83:82:88:df:f0:
bd:11:a2:d0:17:2a:97:71:00:56:ee:13:c1:10:0a:
4c:7f:2a:4f:86:92:c5:89:91:47:99:fa:80:9e:c4:
7f:be:8e:81:11:10:55:dc:b6:3d:bd:a2:7c:02:23:
d2:4d:c6:75:d9:08:d3:18:28:b7:4f:cb:fe:85:f7:
c8:80:a5:c3:1a:6d:2a:8b:79:6e:14:54:74:1b:67:
43:ab:8e:11:f3:a3:5e:b0:5f:c4:97:06:83:01:0b:
60:61:19:42:43:e8:45:b1:f2:19:54:0a:8f:26:15:
bb:f7:f6:c3:b4:77:0e:6c:66:5d:dd:4a:d9:41:06:
6f:d4:f8:97:2a:e2:75:83:14:12:1e:78:23:3e:3e:
6f:ba:28:86:46:27:af:90:c2:bb:2a:44:f7:9b:d7:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FA:C7:DB:14:6D:13:CD:E5:24:A5:BD:BD:15:41:8C:10:03:BC:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.crl
X509v3 Authority Key Identifier:
keyid:60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.205.16.0/20
199.119.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:e5:7e:e2:66:15:ec:0a:a5:0b:a4:dd:d5:16:41:69:58:65:
e4:e8:90:ea:21:c3:07:33:cd:df:fc:b3:86:90:c7:6c:bb:d1:
aa:ac:5c:93:40:11:9c:4c:a4:08:85:7e:cf:14:3f:b0:87:94:
08:c8:ee:10:73:c0:de:81:fb:e3:1b:f7:c2:0d:fa:fb:63:63:
c4:0a:20:2a:d2:96:ec:36:a6:19:e0:35:b2:3c:d1:1b:e9:ca:
e7:1f:3b:fc:14:7c:4f:c3:9a:f1:df:8c:e8:c0:1b:3c:ab:ba:
ee:73:d2:4d:2f:e9:df:bd:fc:03:74:b0:3e:3a:c3:1a:67:fa:
ba:80:4c:40:ea:72:41:e6:37:13:d6:77:ce:60:2a:6f:0c:bb:
7f:5c:52:31:87:a8:6e:88:a7:1e:74:ac:77:4a:08:c2:97:9f:
c5:31:6f:23:77:21:cb:ce:68:18:48:57:db:52:6f:fd:9d:0d:
f7:fe:86:45:a3:5b:7b:03:d0:b3:81:a2:2d:68:14:98:7a:5a:
d2:bc:44:c3:39:88:e3:84:31:6e:76:82:bf:c1:35:13:c9:5f:
79:52:2c:9a:2c:7b:e9:7a:8b:8e:47:26:c4:e9:28:75:1b:f5:
1b:f3:a7:b6:7a:96:73:7a:a5:6e:e1:fb:ed:18:f4:f9:74:e2:
40:6c:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:26:12 2025 by rpki-client