Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa
File: a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa (raw, json)
Hash identifier: SePZyfNCJmzYqOamOh3iAyvJ27WZmpUwZec/ZTagcPU=
Subject key identifier: F2:83:EE:EC:52:94:91:55:90:C5:B4:AA:37:55:52:56:18:E0:BE:D3
Certificate issuer: /CN=e58dee25-2204-469c-b0eb-da831443b959
Certificate serial: 010D0C9F432858484EDACE0AA1FED0225A8EB900
Authority key identifier: 52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 40521
IP address blocks: 198.251.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:ce:0a:a1:fe:d0:22:5a:8e:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58dee25-2204-469c-b0eb-da831443b959
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=e2ae7ea2-c201-4d2b-93b3-fd9f94470016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:b8:f4:f8:d3:1e:ae:03:c0:55:dd:d4:b9:
4b:f2:09:0f:d8:b8:47:7d:27:7e:75:bf:4e:3a:03:
5f:15:6b:d7:f4:51:01:84:cb:68:67:5d:fe:97:c5:
cb:2d:0d:0a:3c:e9:80:d9:d8:2a:a3:79:61:57:dd:
48:aa:f8:cb:34:bb:52:c6:e4:b8:a8:cb:43:f6:5f:
27:bc:c9:c0:2e:57:76:f0:02:9b:8f:43:4b:17:42:
42:ae:fa:a6:bb:47:b4:b9:72:a3:e6:7b:10:da:15:
cb:12:2a:bd:a4:22:02:8b:88:24:1d:31:ff:55:48:
de:95:5b:be:1b:95:8c:6a:56:34:23:1f:7b:0d:b3:
f6:24:3e:4d:4b:19:24:d7:f1:49:78:37:3d:3d:28:
69:d9:81:ec:10:02:71:03:38:19:1f:ac:24:9d:96:
e1:a6:96:43:45:41:8f:04:bf:ae:24:13:c8:23:3c:
d7:dc:b0:8c:2a:4a:31:1b:7a:fd:b3:7d:57:6c:d7:
cd:36:37:43:36:49:fc:a0:eb:b4:e5:9e:24:08:40:
f6:36:24:d8:8d:21:d6:eb:2c:85:09:39:47:41:30:
c7:aa:d1:11:ba:15:7d:93:97:3e:36:c8:76:ff:4d:
21:2f:bf:6f:f5:5c:1a:75:d3:73:25:01:05:35:40:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:83:EE:EC:52:94:91:55:90:C5:B4:AA:37:55:52:56:18:E0:BE:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl
X509v3 Authority Key Identifier:
keyid:52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
sbgp-ipAddrBlock: critical
IPv4:
198.251.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:3f:b1:1f:59:f8:c3:4e:c6:29:b3:1c:44:9f:d6:74:29:00:
62:c9:c2:28:4a:81:c5:e6:1f:22:b2:c4:1b:56:43:82:c2:9e:
92:40:aa:10:47:57:d3:86:51:5c:b7:09:21:65:cc:98:08:1c:
1d:38:c2:63:4b:e9:c6:9f:ea:bb:b4:b5:70:bc:bb:bd:5a:54:
8c:0f:3d:ea:0e:28:5e:07:f3:39:25:b7:fc:1f:b5:fd:52:ab:
c2:cf:29:9a:77:27:96:5a:a7:bb:88:a1:03:d0:61:53:7c:69:
8b:c4:18:f9:48:42:2d:4b:5d:8a:98:0b:64:10:8e:24:9b:49:
de:48:9e:34:c2:4f:60:66:60:55:30:1e:d2:01:7d:cc:29:ac:
9f:0c:f6:be:cb:11:2b:52:38:cf:2f:53:6f:c4:40:a5:39:ec:
9e:04:d4:7c:dc:22:14:10:6a:0c:c3:b7:b7:59:bd:ec:9e:13:
57:ac:e1:36:d3:f0:6e:d1:94:f7:41:43:6b:e0:f9:0e:ab:43:
27:1d:b4:56:9a:32:01:41:55:a7:25:2d:f8:82:b1:da:b0:3f:
9b:54:da:43:fc:c2:95:68:f8:56:58:0e:cd:18:0e:aa:c4:53:
49:4e:6b:41:e4:b6:ff:5b:44:ce:7e:75:c0:6f:40:04:8d:ad:
2c:06:77:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:30:09 2025 by rpki-client