Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
File: e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa (raw, json)
Hash identifier: jf5vmZNy+k25qEiSa/dY0fW/eoDHdRpKOjQfs/4h4i8=
Subject key identifier: A8:8B:08:DA:C9:BF:D1:14:9A:C8:E1:75:3C:25:69:DD:FD:2F:A5:2B
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858482A8FE0E09F6222227D263A80
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 394437
IP address blocks: 198.35.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e0:e0:9f:62:22:22:7d:26:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=87ed6993-49c9-4f30-87d6-bb7759a827ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:e4:a8:70:3b:08:ce:87:3b:67:90:f1:b2:
c4:02:6d:31:d7:d0:9b:57:a0:c1:3a:61:4b:e8:d5:
18:57:a0:96:9b:3e:fe:b8:1f:e8:19:49:38:ea:e6:
6b:2f:1d:a3:d1:44:cb:57:bc:4b:fd:93:28:5f:c9:
0f:3e:d8:9b:51:f8:7c:83:ca:79:8a:11:23:ef:c3:
a3:30:88:c7:29:36:2a:a7:d3:b1:71:d3:fa:0a:78:
53:02:7b:72:86:17:70:8b:6d:51:ca:6c:c7:07:32:
dc:07:36:aa:43:c8:ad:f6:09:2f:36:77:22:cb:2e:
44:ab:a9:77:e7:81:65:d3:60:1c:73:aa:27:c5:68:
fb:a6:e9:44:b0:24:ad:23:db:eb:e0:13:99:22:26:
62:17:76:03:54:53:3e:94:e6:26:fb:55:af:13:3a:
09:5a:f2:38:bd:38:39:ef:42:97:58:2b:f0:3d:68:
5d:4a:7c:8f:55:8d:a5:00:2e:66:bc:59:23:31:ec:
7c:a1:7d:a4:68:95:0c:51:1c:df:11:c8:dd:0c:09:
f0:00:d5:7b:61:74:b8:f5:56:b1:77:77:30:35:69:
09:a6:e7:2c:f3:48:08:53:80:00:7c:35:dd:0b:68:
06:16:7d:79:e7:88:e4:7a:be:d6:63:02:a3:98:dc:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8B:08:DA:C9:BF:D1:14:9A:C8:E1:75:3C:25:69:DD:FD:2F:A5:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.35.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:d2:4c:64:81:90:e6:23:cb:fa:70:a0:a1:30:ae:d9:80:52:
99:a7:fd:47:28:cd:f1:c5:da:62:ae:d8:52:d3:e9:f0:f5:24:
6d:d5:de:89:28:6b:74:67:ec:96:15:2e:a3:91:05:7b:2a:e8:
90:e3:61:a0:cf:48:8d:ae:5d:0f:fe:8e:41:23:e3:c0:e9:23:
34:80:19:3f:b7:14:21:45:03:58:16:81:83:a8:18:8e:a0:de:
e4:32:a8:86:66:dc:bd:49:8d:c3:c3:42:f1:62:37:40:81:4b:
ec:a0:97:41:62:4b:41:fc:3c:52:d2:e0:f1:3a:48:5e:47:9b:
a2:86:f8:35:d8:56:b3:82:26:9a:a6:d4:2f:e1:bf:08:7a:84:
cc:af:48:4c:be:2d:12:dd:b1:b5:6f:8a:fd:f8:7b:6f:7a:33:
38:58:eb:01:0f:c0:a5:d4:ab:80:14:ff:0c:8d:7f:09:c4:b1:
d4:e4:38:b1:dd:5e:73:40:0d:15:6b:86:18:64:a9:c5:c0:7e:
11:71:a3:f2:96:18:40:ba:0b:3a:e8:c6:66:5c:de:d6:01:21:
78:33:34:15:7a:14:d0:90:ba:67:42:3a:1d:e3:89:78:b5:d3:
5e:94:6c:f7:d6:93:fd:0e:a0:2e:b2:09:b8:9c:89:61:1c:4e:
0f:c2:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:30:23 2025 by rpki-client