Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa
File: 1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa (raw, json)
Hash identifier: ycYDBLHiyoy8WvBAnkurHqzxcPX7AhgYuxxe5tN8uG4=
Subject key identifier: A9:A6:19:41:39:47:76:35:82:15:56:E1:B9:D6:25:4A:CF:43:9C:BF
Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial: 010D0C9F432858484018DEDAB347874B46CDBF80
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa
Signing time: Wed 18 Dec 2024 19:08:44 +0000
ROA not before: Wed 18 Dec 2024 19:08:44 +0000
ROA not after: Tue 18 Mar 2025 18:08:44 +0000
asID: 19318
IP address blocks: 198.96.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:18:de:da:b3:47:87:4b:46:cd:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Validity
Not Before: Dec 18 19:08:44 2024 GMT
Not After : Mar 18 18:08:44 2025 GMT
Subject: CN=5f2b796a-b423-40ee-b6c6-dd79e4e323a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:cd:44:8d:b5:37:0e:9b:ff:35:50:29:4c:
52:2e:d0:bf:c9:bb:d0:d2:d7:ac:46:07:bb:7d:c1:
9f:04:22:14:68:74:8b:1f:72:cb:3a:f6:61:92:c2:
a4:b9:ba:be:dd:c1:59:03:7d:61:4d:36:91:d1:19:
68:93:3e:cf:7e:e9:dd:80:99:8f:9d:db:45:b2:d3:
e5:e1:a5:44:b8:3f:a3:f1:ad:04:b6:48:21:cd:59:
00:cf:a4:74:2d:6d:48:b4:1f:07:4a:de:fb:0d:d4:
04:a5:1f:5a:1e:5f:df:84:51:10:18:2e:14:f5:8f:
74:04:c2:c2:df:f5:55:17:aa:36:cf:6f:a8:12:f8:
fb:6a:b4:c7:50:49:f6:bc:0a:41:73:f9:48:a7:12:
63:e3:2a:0f:6c:5c:08:db:a0:bb:62:88:ea:ec:14:
5b:b2:5a:2f:84:df:7f:41:a5:2c:67:4b:7f:02:c0:
a3:14:dc:84:f7:9a:ed:34:52:fb:bd:8c:de:c8:13:
46:a8:5d:b6:4e:de:3b:ff:54:f8:b3:9c:fd:ee:45:
a2:4c:12:50:fe:be:0c:43:a1:51:10:c2:55:79:b8:
7e:7f:6b:9c:10:02:d0:bf:aa:bb:55:2b:1b:56:fb:
59:53:2f:e4:96:33:d6:cc:e0:35:19:f4:0b:41:89:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A6:19:41:39:47:76:35:82:15:56:E1:B9:D6:25:4A:CF:43:9C:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
X509v3 Authority Key Identifier:
keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.96.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:21:8f:76:fa:ce:c8:f3:0c:01:62:e1:24:94:11:19:c0:b9:
53:ee:d7:22:b9:5e:8e:39:9b:77:d7:1b:a3:02:cd:55:11:78:
97:52:18:13:51:8f:2b:df:06:d7:ed:a7:78:5b:12:e3:b2:11:
71:ea:ab:b8:4e:97:54:30:bc:68:af:5b:2e:b0:73:50:c0:20:
0a:2c:a3:08:f3:92:cd:ce:8c:11:58:4d:a9:c1:34:4f:b3:cb:
0f:e1:3c:8c:ad:1d:65:66:1a:01:60:b4:c8:c0:1f:c4:19:a6:
9c:79:7b:86:24:ee:f0:17:9e:1c:39:d5:dd:98:8e:72:32:7c:
cf:a2:27:6c:c0:0f:2e:59:97:ac:a7:a3:c6:36:4b:fd:47:a4:
99:55:98:ae:1c:62:6f:c3:27:e0:cc:27:0c:fa:0a:26:b6:22:
a6:b9:f5:d6:86:10:3a:33:6f:28:f6:44:14:fb:25:ef:4e:9b:
69:b6:6e:c8:a2:79:d5:95:21:31:dc:7c:ad:85:82:9d:f8:cd:
0e:e3:eb:1a:15:bc:79:1d:a6:c1:5a:6a:bc:e8:af:20:fd:b4:
53:f2:c2:45:74:d7:fe:32:ac:8d:35:fd:eb:b3:43:4f:0d:d5:
b5:dc:f7:48:4a:ca:80:1a:41:cf:f3:2b:8d:e3:b8:b5:1e:63:
aa:17:a1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:46 2025 by rpki-client