Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/158a5a57-183e-3403-b6e4-6aee4da39bb3.roa
File: 158a5a57-183e-3403-b6e4-6aee4da39bb3.roa (raw, json)
Hash identifier: pZ7QeMfWPyHGgzk+RigQUeH78+UvoL+KQ5IiUiWVAEw=
Subject key identifier: D6:92:5C:FD:E5:E5:C1:DB:14:E1:3F:54:EF:52:D4:AE:4D:A3:27:DE
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858483B50063FE29B4BB5098F2B80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/158a5a57-183e-3403-b6e4-6aee4da39bb3.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 15290
IP address blocks: 209.146.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:06:3f:e2:9b:4b:b5:09:8f:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=2416a1f4-184d-407f-8e68-8585d39d8926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:b0:b6:45:34:8a:1e:f2:36:c5:1a:50:f9:
70:7d:9f:4c:3f:87:e3:84:e0:1a:f1:a8:5c:07:ba:
12:74:47:93:4d:b8:58:a2:13:1c:bc:9e:d4:4f:f6:
16:7d:86:6e:dd:eb:85:92:20:d9:18:03:46:f6:81:
49:11:3c:cc:8f:bd:78:4c:0f:ff:28:a2:50:66:3e:
ae:3e:de:3f:8f:1e:3d:41:03:90:5b:43:c2:b5:0e:
88:34:fd:d6:50:fe:12:24:ae:7d:eb:8e:a3:ba:e4:
ab:4b:34:59:71:85:9c:44:71:cc:57:e2:98:92:c0:
71:c3:3a:42:89:a0:fb:2e:75:54:be:bc:47:d9:33:
e6:21:7a:67:b1:ab:bd:b7:7a:d7:8c:4e:86:de:2e:
cb:b9:6f:ba:d4:6f:86:4b:94:4a:b1:89:9b:a7:da:
ee:e4:1d:f8:98:bc:62:d2:7c:dd:f4:40:56:cb:68:
a2:c6:2e:ea:89:b6:19:e2:09:e4:19:09:b8:ae:8b:
b8:d4:fb:ac:aa:55:c5:7e:2b:38:d2:82:3f:00:09:
c0:78:0f:80:13:84:47:99:00:49:24:0a:50:aa:96:
84:27:ff:17:cf:90:fa:42:9a:ca:25:ad:7d:de:a2:
ac:cf:3f:38:db:dc:91:16:14:8a:c2:ac:7d:78:5d:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:5C:FD:E5:E5:C1:DB:14:E1:3F:54:EF:52:D4:AE:4D:A3:27:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/158a5a57-183e-3403-b6e4-6aee4da39bb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
209.146.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:24:bc:6a:9f:e2:49:56:47:6c:78:fb:90:2c:bc:04:83:93:
30:f8:6d:51:f1:5e:f3:32:58:29:99:a3:3b:22:b8:cc:9e:b9:
77:0c:2f:cd:f2:d1:c8:5e:b6:4e:ad:5c:01:f3:b5:cf:b7:4a:
91:59:4f:23:1d:0f:49:9d:bb:1b:93:41:75:2b:c9:65:a5:2b:
47:c7:1c:4a:74:32:0c:c5:f3:44:e4:15:b0:33:49:9e:cc:3d:
52:ac:ce:1c:86:32:1f:04:fc:60:64:d7:ef:bb:23:00:00:09:
12:2c:97:a6:61:3c:38:54:70:db:a5:29:c7:b1:30:1c:ed:ce:
df:54:d8:74:64:a1:e9:8c:cc:9a:f8:2e:d5:44:fc:e5:f8:16:
99:28:1b:02:bb:17:3d:91:eb:8a:48:a7:f7:6c:9a:70:4a:8b:
0e:78:1b:35:60:0c:8d:e1:08:f8:16:f6:8c:fb:08:4a:2e:13:
8b:f4:75:5f:49:ab:dc:d7:bd:ae:9b:b6:bd:32:1e:e4:92:c0:
c1:47:32:31:ca:bc:93:b7:45:41:f9:d7:e8:37:d8:c6:d2:57:
ec:9f:30:ad:a9:2a:90:3e:dc:c3:05:4d:d9:06:42:58:81:68:
08:af:37:4b:04:c3:6b:67:cd:67:3e:57:9c:99:b1:84:01:40:
e2:8c:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:20 2025 by rpki-client