Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa
File: 04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa (raw, json)
Hash identifier: +pPiuZgyG85N4ycUGrAA5Q0AtFTLrJz+8MYw4kEh454=
Subject key identifier: 53:69:4B:14:1A:BA:A8:C7:7C:EA:CA:3A:2C:A3:D0:F5:16:C9:AA:AC
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F4328584834558241D8200426B8F915D8
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 22925
IP address blocks: 198.207.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:82:41:d8:20:04:26:b8:f9:15:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=fb40677b-a50a-43fe-8dc4-c8c2dfb0fe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:7a:d9:da:6c:c2:51:4b:d7:13:a0:de:60:
c7:58:2e:ed:51:13:64:17:a2:88:be:c6:d7:27:e5:
b6:af:64:62:06:70:16:43:29:f1:a6:a2:d3:98:aa:
21:e5:cf:dc:27:27:3a:26:aa:23:9c:d8:cc:0d:b0:
0a:7c:f3:41:54:30:b7:60:db:ed:a8:a3:74:98:b7:
48:52:d8:05:54:4e:f8:2f:19:68:9c:45:b1:b8:93:
62:53:fd:d1:ca:12:df:51:d1:c3:fd:79:ca:bf:70:
09:de:80:a7:2f:4f:31:0e:60:2a:85:8c:cb:cc:e2:
b7:93:4f:1f:9b:85:df:33:b7:19:05:e1:9f:58:00:
eb:ac:f8:3d:bd:a8:b9:e9:5e:a4:5b:07:8e:67:2d:
4c:a0:b8:17:e4:9c:1c:81:2b:7b:2d:84:f3:6b:09:
0d:67:1c:7e:7f:37:05:f7:ad:e4:9e:67:a0:60:6f:
e0:7d:01:35:85:9a:6a:5a:3c:61:49:20:b5:ab:7b:
f1:d1:47:dc:8d:e8:7a:1c:06:dc:0b:09:c9:94:08:
41:d0:0d:af:e7:e1:1a:47:eb:90:8a:0f:70:42:b4:
3a:48:ec:af:1b:3c:72:83:68:20:a5:7b:21:53:0e:
dc:9c:f4:05:29:81:30:e6:4d:09:a3:b6:ef:c3:a5:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:69:4B:14:1A:BA:A8:C7:7C:EA:CA:3A:2C:A3:D0:F5:16:C9:AA:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.207.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:3c:39:61:60:67:74:fe:98:91:6e:62:c2:9b:1f:d8:3f:09:
ba:99:90:36:89:b1:0d:47:e7:be:ec:c4:04:06:f2:2a:4e:fb:
9b:d8:d8:af:5c:ed:33:7a:9d:eb:7a:16:24:e4:d5:58:de:2b:
d3:26:21:6c:e0:5e:a6:87:e8:c6:3c:64:a0:f8:1a:43:39:52:
e9:38:87:47:fd:82:f4:2b:02:ae:a0:75:73:a6:1d:5f:e6:37:
16:85:67:27:91:70:ad:bb:61:f7:4e:b5:dc:c9:b3:52:66:6d:
9d:ba:d3:92:7a:00:b6:3a:9d:fa:b0:f9:f2:91:b6:1c:d6:a5:
f4:5f:d9:c2:4a:b8:da:2c:92:58:44:da:a5:1c:35:3a:57:f0:
6b:fd:45:60:33:28:0a:73:0d:ec:a7:51:8d:2a:cb:e6:f2:0f:
6c:33:d2:c1:5a:fc:bc:d4:17:4d:45:61:25:2c:35:bf:81:ef:
0c:0d:33:8b:35:82:38:ec:43:0d:e4:0b:ec:42:24:8b:1f:ae:
c1:ff:f5:02:4f:0c:23:cb:22:ac:d6:79:67:0d:1f:32:6e:23:
ff:fb:9b:55:36:10:71:b4:03:ad:27:56:b5:7e:5d:42:f0:b5:
08:57:52:b1:db:28:f1:c6:0c:0d:c6:18:04:f8:ea:7d:82:c8:
05:b6:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:13:22 2025 by rpki-client