Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa
File: 58cb281c-c134-3300-b62f-7a82f33f8b29.roa (raw, json)
Hash identifier: Q/ScxX1LVt29AWfhigMgZ0AJfZrSt4qkMliHSTmta+0=
Subject key identifier: 68:D7:28:CA:2E:3D:ED:3F:15:BB:2A:EB:45:3F:BB:AD:85:F4:03:34
Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial: 010D0C9F43285848100A9382E855B0B56ED9D400
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 56274
IP address blocks: 198.208.133.0/24 maxlen: 24
198.208.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:93:82:e8:55:b0:b5:6e:d9:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=9bd64188-dd19-42c0-9649-7f2949b169b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:99:40:9e:e9:01:8e:1a:4b:09:af:ca:42:
34:bd:41:6e:17:8a:ef:54:5c:9d:95:07:46:3a:12:
05:b4:e7:f8:77:8e:72:d6:a7:52:d0:43:f8:60:7d:
c6:33:ea:e0:30:27:2f:ad:16:70:b5:52:9a:8f:cc:
78:9e:eb:13:27:a1:26:d3:79:06:3a:4b:1e:2f:40:
77:5a:f9:ac:73:e3:f0:75:23:39:e3:2c:32:ac:3f:
24:fd:70:54:08:ec:1f:11:44:44:42:06:5c:f2:b6:
73:ff:76:67:18:74:9b:48:6a:b1:18:9e:96:81:b9:
18:05:7e:0d:54:33:f8:88:82:7a:85:43:3f:66:27:
b0:5f:c0:a0:25:6b:be:7c:d2:d6:7a:f3:ee:87:06:
24:dc:3a:91:8e:40:cd:01:5f:78:82:6a:ee:53:f5:
45:9e:bc:1c:40:25:f6:cc:44:87:71:1d:cf:24:13:
0d:ec:0f:7a:f8:ec:a0:4b:11:f2:4d:43:b0:55:88:
9d:f9:50:88:27:3d:85:47:77:d2:ef:bc:2d:1e:ea:
37:df:1a:9b:60:a7:f9:99:01:bf:fe:f6:7f:3b:35:
0e:61:15:16:75:97:6f:d0:1d:f6:f1:10:aa:c3:a1:
c1:f8:7a:6c:6b:47:76:3d:07:e9:a8:21:99:07:38:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:28:CA:2E:3D:ED:3F:15:BB:2A:EB:45:3F:BB:AD:85:F4:03:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
X509v3 Authority Key Identifier:
keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.208.133.0/24
198.208.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:4d:88:de:74:60:85:99:ae:5e:83:5a:cc:5c:07:5b:3d:d3:
17:db:6e:6b:20:b6:37:ef:2d:98:d2:11:d1:d7:66:41:e3:7b:
04:05:45:01:f2:5d:75:e6:84:25:29:92:3f:94:8f:68:4c:37:
74:b9:5f:ca:c7:16:26:bd:34:ef:76:5e:ad:81:df:5e:ad:67:
f9:af:ac:8d:65:54:50:9d:b1:1e:32:e2:72:c8:b2:86:09:bf:
94:20:24:5b:23:a2:11:0b:bc:86:41:ca:0a:70:dd:15:a5:8f:
a0:75:12:b2:08:51:f9:bb:5d:a2:83:15:f0:c4:15:7c:4a:16:
3a:75:ab:a7:47:60:a4:0f:cd:87:3d:e2:0d:e0:1d:43:57:79:
a3:35:fa:e5:4c:07:54:9a:10:ac:30:90:18:39:e2:81:f8:59:
6c:7a:fc:db:eb:28:b3:06:b4:ff:5b:e8:c1:48:01:b6:79:c5:
bb:15:ec:dc:df:05:ab:10:3b:d6:0b:6d:f3:8a:ee:a1:fd:57:
a8:8e:d4:e5:93:d7:f6:11:39:41:25:31:41:26:f0:b8:d3:d5:
38:3f:be:6a:16:35:06:67:56:aa:88:a4:aa:67:91:b9:20:85:
b7:7d:e9:f9:0a:20:7d:83:72:26:f5:6f:fb:5e:f8:b0:43:40:
03:93:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:40:25 2025 by rpki-client