Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/9d4e4e2e-93d3-37bb-94e5-19b583ea03b4.roa
File: 9d4e4e2e-93d3-37bb-94e5-19b583ea03b4.roa (raw, json)
Hash identifier: rGJWcb9lG2SBWHfRNqlaTiCkjcEMJLv3m57EYGFu7Ow=
Subject key identifier: 8D:ED:D5:2B:FD:6A:0E:94:A2:40:A4:CD:C6:56:90:E7:1C:61:98:70
Certificate issuer: /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial: 010D0C9F432858485470340B4FAF6A3A257A4900
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/9d4e4e2e-93d3-37bb-94e5-19b583ea03b4.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 1706
IP address blocks: 198.60.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:34:0b:4f:af:6a:3a:25:7a:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=a110fa3f-862c-4821-9b85-9ace7720f1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:83:bb:54:67:0f:ab:b4:bc:1d:a0:a9:45:
a0:2b:17:3d:95:4a:6a:b0:23:7f:41:b6:80:d1:c3:
bf:be:d6:a1:a9:b4:8f:00:c6:51:fe:c2:13:2e:a4:
a5:80:9b:33:b0:19:38:55:69:bf:5b:19:66:2e:d4:
9c:57:28:f7:b1:f6:a4:9d:d8:48:7c:8b:2f:40:0f:
0f:66:86:b0:2c:26:59:70:d3:20:3a:6e:26:cd:92:
77:30:6b:d2:32:a6:00:15:44:9b:8e:c1:07:8a:a5:
5f:40:87:d2:bc:00:a3:f5:15:91:0e:63:c9:d8:f8:
30:27:89:3e:a6:d8:42:21:f0:eb:a1:f3:c3:07:ff:
77:26:51:59:58:b7:68:fd:c9:ff:18:c1:ac:83:d7:
a8:f3:52:dd:08:af:30:d2:5b:ef:b5:63:13:a6:54:
c7:4d:4c:a8:59:76:e1:43:67:08:2b:da:7b:2d:c8:
a4:b2:5f:92:2a:c0:50:75:7d:23:da:c5:a7:98:7b:
3d:90:96:ca:1f:74:7c:4b:f1:6d:ca:25:fc:c3:0b:
a0:8b:1c:91:77:52:99:a7:79:a5:a6:bd:bf:ff:d0:
6f:43:16:a6:83:74:de:96:8f:e4:ab:3d:16:52:76:
88:16:92:59:c4:a8:99:e6:27:5f:42:1f:ed:cb:4d:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:D5:2B:FD:6A:0E:94:A2:40:A4:CD:C6:56:90:E7:1C:61:98:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/9d4e4e2e-93d3-37bb-94e5-19b583ea03b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
X509v3 Authority Key Identifier:
keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
sbgp-ipAddrBlock: critical
IPv4:
198.60.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:7e:19:1d:f4:3b:89:71:1c:c8:dd:7c:1e:be:7e:28:ba:3c:
f3:ae:27:13:ce:62:34:89:28:4e:be:17:29:f6:54:50:75:49:
ce:e3:df:e6:47:6e:3c:9c:5d:05:9c:ca:73:51:87:a5:1c:d8:
af:51:43:d9:d9:cc:a6:d0:6d:2b:d0:83:37:38:ed:aa:8b:0c:
9a:58:69:4a:33:c8:6a:8b:f3:09:4a:79:8c:0c:60:12:bd:cf:
86:ae:0d:79:8f:26:da:f7:f0:0b:6a:ea:6e:e6:aa:99:73:33:
a1:9c:78:72:cb:07:9a:fb:8c:cb:9d:da:9d:91:10:9e:3b:56:
65:15:ef:21:a1:ec:8d:a6:6a:8c:21:16:19:65:4c:fe:bd:dd:
f7:e0:6c:ad:4c:8b:a9:d0:d6:4f:98:39:fb:9d:47:d6:cf:08:
3e:91:3f:ad:0d:07:b5:14:b7:05:74:46:e6:25:b7:30:8c:dd:
7d:05:70:8c:95:be:55:e9:e4:69:61:02:d9:2a:76:1d:d4:e0:
55:ae:9d:77:d6:d2:b9:fa:df:4c:ef:94:00:a2:d2:3a:7b:bd:
cb:7e:7a:e3:a2:32:31:92:64:27:6a:ff:38:72:8f:04:0f:b3:
29:57:0b:99:e3:bb:58:65:a9:a0:c2:cb:45:94:fd:6a:23:29:
4e:51:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:17 2025 by rpki-client