Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
File: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (raw, json)
Hash identifier: zscAa882IKuVVJCzmX34eXwXqYAQh5L4E8q0R45MaC4=
Subject key identifier: 69:94:D1:99:9F:14:E5:3C:BE:41:49:2A:C2:21:D8:28:E7:5A:C3:7C
Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Certificate serial: 010D0C9F432858489075F8545E0912ABCD656180
Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 2902
IP address blocks: 198.59.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f8:54:5e:09:12:ab:cd:65:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=24338250-c36b-4bc9-b84f-38f15220e43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:d5:2c:5d:a1:90:54:65:b6:63:b0:c8:f7:
6c:02:f3:e5:34:4f:8a:20:9c:1e:aa:24:5b:97:d2:
67:4f:4b:42:02:ae:00:96:47:c0:c1:82:43:ee:16:
4f:12:cd:10:0c:e7:97:81:32:82:f3:2b:ef:28:1a:
50:6a:4f:17:1a:97:62:d6:2c:11:80:b5:97:de:4f:
51:be:52:1d:ce:40:bf:16:62:3c:31:82:be:6b:44:
a8:ba:c8:e1:6a:d9:01:8e:88:66:1d:17:fe:d7:b4:
17:87:8c:f6:df:27:a3:2b:28:ec:f6:fb:4e:be:45:
17:9e:9c:9c:c1:b7:ea:12:74:fb:0b:5e:33:2b:1b:
2a:a4:b9:18:e5:28:90:3c:7c:1f:7c:57:43:22:44:
7a:33:87:29:9b:fc:ce:d8:5c:38:35:06:18:44:bb:
4e:9a:b9:65:dd:d0:87:85:83:cd:51:8e:dc:65:b8:
56:22:4b:6e:b8:94:7c:a8:20:c4:26:4e:2e:01:a0:
9e:5c:60:83:f9:9d:59:55:46:ce:86:3b:39:10:b9:
74:4d:9e:3f:a2:e0:5a:aa:76:5e:f8:3d:a4:9c:cc:
e0:0a:7f:d8:2e:9e:a2:ea:b3:54:d7:9a:62:26:83:
c3:cd:1d:a2:cc:b0:2c:b1:7e:29:9c:4a:ec:2d:28:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:D1:99:9F:14:E5:3C:BE:41:49:2A:C2:21:D8:28:E7:5A:C3:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
X509v3 Authority Key Identifier:
keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.59.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:ef:92:19:a4:09:98:8e:63:9a:b0:45:86:97:90:5b:51:e4:
6c:f0:b6:98:bb:41:ef:ba:39:ac:90:0e:6b:e8:06:56:d1:7d:
4b:46:97:b2:26:32:9c:56:0b:3f:dc:3d:0c:d8:a5:c5:67:f4:
a0:df:ef:69:f5:01:5c:09:6a:4b:40:6f:74:3a:45:09:34:95:
1e:f2:ea:5d:c0:7f:61:9b:43:49:09:47:d3:dc:9f:01:5d:f8:
96:87:76:96:18:a3:f6:f2:d9:ea:1f:cc:4d:a6:f2:2c:62:56:
f4:22:ff:aa:0a:22:d3:a4:df:67:b5:75:c6:af:dd:68:7a:4d:
f6:d8:c1:99:87:b1:fd:e7:5c:89:5f:11:33:a7:6e:3d:64:ed:
56:33:9d:52:14:c5:d8:9c:44:ce:b3:88:ac:41:5f:28:ee:96:
fc:5b:a6:24:d8:f7:4c:8e:9f:7a:03:3f:63:97:a6:86:90:db:
41:04:5b:19:5a:ca:d1:4e:62:74:ab:9f:08:42:9e:25:48:a0:
9b:21:62:60:78:ac:49:cc:1a:1d:42:b5:ea:62:a0:c5:16:07:
c4:c4:4c:03:08:2f:4c:2a:1a:14:6c:5c:79:ea:e0:53:6f:aa:
b9:02:5a:60:3b:7f:ff:30:e9:63:71:6e:02:36:b4:9f:ee:99:
8e:a9:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:31:41 2025 by rpki-client