Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa
File: 843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa (raw, json)
Hash identifier: tC47KWnQorkA8OmJastpMqZm3ofKuGWvFnS5ZeAi+ds=
Subject key identifier: 8B:9E:65:74:6A:6E:E6:42:24:15:2C:73:01:80:48:89:50:B8:03:A1
Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial: 010D0C9F4328584843B00769200A30BC56798DC0
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 2572
IP address blocks: 198.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:07:69:20:0a:30:bc:56:79:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=36f1536f-f980-43ae-8f82-9993373e3c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:c9:25:34:c7:b6:15:b9:39:ab:cf:4c:03:
af:75:d7:9c:cb:22:25:80:b5:c3:9e:1e:24:61:c0:
f7:8b:58:72:ee:fe:78:90:61:20:28:d4:81:99:38:
c1:04:4e:67:58:54:f0:a5:74:d3:8c:83:00:18:b7:
8e:6f:a6:2c:64:bd:9c:23:cc:e1:73:21:2b:83:dd:
54:e6:83:1b:bd:40:1a:28:ee:20:72:af:37:8d:b4:
13:6a:59:1a:91:d4:bb:b1:3f:7c:df:4b:5b:b5:67:
a8:1b:b1:d0:72:53:60:e5:5d:1e:dd:ce:f6:8d:19:
d1:95:af:b4:c3:22:b3:99:6a:ec:2b:f1:93:2e:55:
2a:53:73:b4:0b:59:52:ae:84:50:2a:15:24:63:1e:
c3:57:e0:34:ff:6e:3d:4a:fe:91:73:b0:5e:17:f4:
21:88:d6:ab:7e:80:ff:2a:c8:b1:09:c9:0a:75:d6:
31:59:af:25:fd:4e:e6:75:f8:25:87:ee:84:93:0b:
08:fa:89:8e:2b:18:73:38:de:bb:21:ab:74:53:d6:
b4:a7:ee:20:c5:55:c4:5e:25:57:4a:db:2c:f3:24:
3d:65:d9:88:92:25:b2:74:18:f4:45:da:99:6c:09:
97:74:fd:65:ea:85:1b:26:02:be:a8:0d:64:35:ff:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9E:65:74:6A:6E:E6:42:24:15:2C:73:01:80:48:89:50:B8:03:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
X509v3 Authority Key Identifier:
keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:a9:a6:13:d0:a0:58:64:6c:57:1c:08:84:a7:42:db:44:69:
00:3f:f6:26:da:0a:bc:75:ad:54:f7:24:28:44:1a:45:5a:44:
49:ae:00:89:50:8e:a4:bc:bc:a5:9b:15:0d:b1:67:5b:68:a3:
d4:88:83:2e:26:3a:6a:52:81:86:3b:b4:fa:61:1c:89:36:d5:
71:14:fe:2f:44:77:b9:91:6d:f5:81:d0:a0:76:22:53:45:09:
52:fe:a6:76:34:29:d5:82:b6:86:23:14:e4:2d:a4:1b:5f:ad:
a5:56:ac:cc:7d:d9:e7:93:07:50:f7:03:63:3a:23:18:09:6a:
ea:16:06:27:ed:9a:56:05:f3:bb:b1:a5:0b:93:63:f3:f6:b6:
6c:11:d5:29:93:13:b6:d5:92:97:f6:49:69:9b:c7:06:6f:e2:
2d:ec:d9:b9:bb:a7:73:5b:38:ca:95:8b:34:d8:3b:fa:0b:5c:
ac:c6:8a:18:d1:26:09:90:0f:0e:c0:14:37:e5:d9:c2:77:02:
6b:60:a6:3c:24:68:13:5a:25:2a:97:99:6f:5c:cc:74:ca:11:
ee:f8:a7:a9:3a:d3:89:fe:e9:58:71:7a:c1:d0:f4:f8:9b:a4:
6d:59:22:0f:ef:1d:fb:6e:66:5a:9b:27:d3:1a:0f:09:74:ce:
27:e2:0e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:24 2025 by rpki-client