Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/a1a1fa15-c4a0-3a82-bd8e-8ff96032c6b8.roa
File: a1a1fa15-c4a0-3a82-bd8e-8ff96032c6b8.roa (raw, json)
Hash identifier: R8sGajpxoo8rDnbgAaL+boLGiZO0eoC3XHVfAdnZHlQ=
Subject key identifier: 1A:8D:0E:6D:E1:09:65:A2:42:58:F0:20:2D:2A:1F:1C:2E:55:55:A6
Certificate issuer: /CN=6431aabe-7ca9-4420-b394-80fd03294bc7
Certificate serial: 010D0C9F43285848302540D2500818823E07F1E0
Authority key identifier: 1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/a1a1fa15-c4a0-3a82-bd8e-8ff96032c6b8.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 393906
IP address blocks: 198.153.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:40:d2:50:08:18:82:3e:07:f1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431aabe-7ca9-4420-b394-80fd03294bc7
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=1b1c3a9e-b666-4085-a3db-440771746217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5a:62:3d:a6:7c:47:18:35:6e:59:12:6c:a5:
b0:c8:d5:b7:bd:62:e5:f8:00:95:57:58:6c:e8:bd:
b5:27:aa:ec:8a:45:32:c6:e1:54:b0:6d:dc:1b:1e:
e5:cb:7a:84:fc:f0:76:9e:95:20:12:7f:75:56:39:
da:93:6f:a1:b9:dd:bb:04:85:4a:8f:83:a0:09:f5:
d0:f9:61:53:1b:9f:5f:38:6f:ef:ca:44:1d:d6:a7:
14:00:ae:37:1f:42:1a:b7:69:68:85:e9:b8:99:fa:
31:d5:10:94:23:e4:29:dc:96:74:11:70:59:c5:45:
13:b4:b9:02:10:84:30:b8:1b:99:4c:e2:58:15:5e:
f2:4d:45:00:fe:ab:f6:ac:a6:83:1b:35:59:4d:16:
70:09:c3:dc:6a:d4:ff:a2:92:3d:59:7a:45:2b:76:
1e:e8:6e:23:30:c5:22:46:32:cc:dd:64:b6:8e:9d:
92:9a:d4:08:a3:55:6c:e8:a0:e4:6a:b5:a9:fa:ff:
02:bd:30:de:a2:8f:30:2a:f2:b9:a3:94:e2:8e:5a:
d9:06:16:a9:bc:03:3c:85:3a:23:37:92:89:f6:95:
91:e5:e5:cf:05:21:3b:13:0a:a8:ac:61:b2:84:d8:
67:5e:a0:29:d5:9f:66:56:cf:95:98:97:3f:c4:67:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8D:0E:6D:E1:09:65:A2:42:58:F0:20:2D:2A:1F:1C:2E:55:55:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/a1a1fa15-c4a0-3a82-bd8e-8ff96032c6b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl
X509v3 Authority Key Identifier:
keyid:1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.153.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:d0:90:9e:f7:21:96:5a:bb:88:9e:ac:ed:07:c7:04:49:69:
ca:97:15:ba:c9:67:8e:f3:9e:d1:d3:8d:af:da:da:79:04:64:
04:7a:ad:bb:80:9e:c5:ce:17:89:20:6c:6d:f9:f2:7c:df:0c:
b3:53:8e:8d:f9:ad:c7:e5:f8:3f:59:56:fe:2a:93:da:08:5e:
78:2d:b6:9b:c0:af:bc:36:87:be:09:c8:37:c5:3a:2e:57:d6:
c6:35:e1:3e:24:36:a9:a9:a1:71:c4:d2:30:e9:bd:a0:0e:fe:
8d:d5:36:bc:ec:50:bf:62:94:3b:57:dd:a8:0f:c0:a1:03:5a:
16:bb:4a:31:97:f3:54:8c:f5:63:80:44:8f:9c:f4:28:3d:7c:
cc:ae:4d:3a:84:bb:0d:b8:94:e6:af:06:52:25:e4:f7:74:a5:
4d:1e:0c:74:4c:06:ad:4b:5f:25:ed:69:08:58:08:4c:3a:54:
a0:97:5b:11:d8:ca:03:39:67:29:46:91:80:38:33:7e:a9:06:
68:bc:e9:aa:45:e8:6d:e7:47:3d:92:2a:04:8d:0d:7d:d0:21:
b8:2f:6b:ac:4b:5c:3b:3f:34:38:3a:0d:da:69:12:a4:0f:1a:
9f:77:ea:37:85:e7:28:dd:8a:bf:7d:e0:8a:e3:98:f0:cc:d8:
40:91:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:52 2025 by rpki-client