Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa
File: cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa (raw, json)
Hash identifier: joRZnJeE4Kbrm0dArsQkjj8tYzkHmSeg+H+d/bpJhsg=
Subject key identifier: A9:68:86:26:A0:42:75:6A:C4:44:62:F8:D5:58:42:15:4E:19:45:30
Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
Certificate serial: 010D0C9F4328584824FA7BF3DB6143075FF70B40
Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 32762
IP address blocks: 198.96.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:7b:f3:db:61:43:07:5f:f7:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=50a91952-e91d-4aca-a71a-74881e442a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:6f:25:e4:e6:c0:75:33:ae:0f:a0:5f:fa:
50:3c:4e:5f:a1:a4:1e:0b:eb:17:5c:27:7b:2f:b0:
64:c2:03:62:c0:06:85:9c:56:dc:79:aa:29:02:51:
6e:20:57:f4:ef:9c:6f:f1:84:6d:7b:5f:7c:da:71:
ab:c8:19:df:96:cf:f5:f0:78:47:a3:6a:d3:b1:59:
56:6f:fb:e1:9d:89:bd:56:1b:34:2b:2a:a6:2f:fc:
54:e9:07:ae:62:bf:ff:83:8e:ff:4c:55:04:9a:5f:
5d:8e:d1:0f:71:2d:bb:65:19:96:4c:51:6c:e0:15:
0a:2a:d8:51:7c:94:4a:74:2b:70:98:c6:8c:d1:19:
e8:7c:4e:93:57:4d:fe:9e:bf:6f:bd:79:73:e2:16:
9c:0d:fb:40:76:38:89:7a:ed:6f:e7:1f:83:06:86:
ff:de:63:dc:56:19:65:30:ac:9a:74:81:94:d1:a9:
2e:35:c6:16:07:6c:0a:9d:98:51:3c:d1:99:54:e8:
03:4e:b3:6d:40:f5:c7:86:37:76:36:79:55:fe:76:
7c:04:4d:17:52:0d:14:2a:bb:19:bb:05:f8:fa:a3:
35:03:c3:8b:0b:e0:a6:7a:f9:08:30:f6:e9:bd:12:
29:a4:10:a7:37:81:e4:c9:7d:40:30:a1:31:fa:ef:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:68:86:26:A0:42:75:6A:C4:44:62:F8:D5:58:42:15:4E:19:45:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl
X509v3 Authority Key Identifier:
keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.96.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:cf:10:b9:56:d4:e4:a5:0a:85:f1:d6:a3:02:6f:66:ad:f9:
99:64:a5:d6:70:f7:1b:dd:2f:b4:3f:d9:38:f0:49:71:4f:9c:
92:34:d3:a0:a8:be:73:f3:37:36:6d:10:ac:d2:fe:ef:d1:aa:
8c:d9:f6:8b:54:16:28:ab:52:f0:d5:76:b0:5e:b8:f2:38:56:
ae:52:5e:2f:80:0c:ca:34:4e:5c:1c:a0:27:48:47:8f:5e:99:
97:d4:d5:ba:61:8c:70:4d:1c:cc:e6:3b:00:70:ae:15:b7:ef:
35:be:cb:0f:9c:62:e0:aa:af:ae:e8:99:b5:e7:0c:2e:9a:eb:
1d:c3:c5:fc:9c:32:11:29:0f:57:a1:9a:00:33:dd:16:77:c7:
54:f0:c2:53:ea:a2:d2:eb:38:9c:92:a0:74:ae:f6:ea:6a:87:
1b:4d:3e:92:4a:7c:ed:f9:1c:e0:60:a7:46:9b:22:2c:18:29:
72:cb:d8:e4:fd:53:52:ee:17:bc:d4:07:cd:46:32:00:ac:58:
1e:d5:1c:ca:0c:38:37:e8:20:df:ad:10:d1:08:84:0e:b1:28:
9f:76:4e:54:48:e5:d6:44:a0:bb:e3:8f:8a:a6:0b:15:1b:92:
36:a1:ed:95:90:d6:04:b8:c1:45:9a:8b:46:dd:fc:2b:22:c2:
8f:ee:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:53:37 2025 by rpki-client