Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9a694b3f-d924-3c7e-a673-dcb7c5cdf586.roa
File: 9a694b3f-d924-3c7e-a673-dcb7c5cdf586.roa (raw, json)
Hash identifier: 72NE23/9jC8yL5YcwMGUb3IKoTo/DCLwk/xhIedOe58=
Subject key identifier: E3:E3:CB:31:C6:EA:7D:7C:31:40:66:5B:27:44:9E:99:7B:3D:E0:2C
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F432858484AAADE6049AB1B37550978D0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9a694b3f-d924-3c7e-a673-dcb7c5cdf586.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 53355
IP address blocks: 198.150.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:de:60:49:ab:1b:37:55:09:78:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=e0848152-b175-4bb1-a0d7-23f77bd2795a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:61:23:ac:b0:09:db:c3:c7:14:33:13:36:
c9:1b:4a:58:34:47:e4:a1:cc:02:2e:c9:71:5c:25:
84:68:78:3d:00:86:58:b6:8a:21:32:78:ee:26:2e:
8b:01:4e:2e:20:1a:5e:2d:19:87:e9:0b:c1:15:9d:
08:cf:31:25:e4:e1:16:37:25:cd:4c:95:57:01:13:
91:2b:32:3d:02:e4:b0:5f:a4:ea:80:e5:9a:be:e8:
1c:8d:92:25:8a:9b:fe:bd:1f:ad:d0:d0:83:23:d3:
0d:8b:6e:cf:65:71:da:00:38:9a:32:ad:6e:38:f9:
5d:d4:db:77:33:f4:8a:e9:5f:75:73:02:84:a6:ea:
0b:f0:90:e0:b6:c5:87:59:f9:95:c5:05:13:87:6f:
88:a3:b0:b2:cd:bc:ec:c1:32:c9:1e:90:28:30:b1:
60:5b:40:3d:8a:43:18:bd:cb:24:32:5f:9f:bd:1f:
16:73:19:14:d6:e4:58:13:d7:7e:14:c5:6f:41:19:
eb:b2:a1:61:3e:aa:f7:2a:da:b3:c0:27:f4:68:87:
97:0e:7b:1f:de:58:ce:13:0e:bb:6c:84:f5:98:e4:
16:4c:06:d2:96:57:be:19:1a:ae:3e:8f:53:db:45:
58:60:db:c5:a8:7e:bf:92:4c:e5:65:87:27:06:cb:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E3:CB:31:C6:EA:7D:7C:31:40:66:5B:27:44:9E:99:7B:3D:E0:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9a694b3f-d924-3c7e-a673-dcb7c5cdf586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:4a:b5:d4:a7:66:02:fc:6f:8d:67:c5:c1:82:01:90:24:d3:
0b:87:31:26:2a:99:14:b5:0a:fc:fc:87:d6:ac:3c:90:f8:11:
5f:71:91:a1:80:60:18:d6:75:69:31:b7:bc:3f:8a:be:eb:b8:
aa:a8:6b:ea:3d:29:9b:bf:ed:a9:19:18:8e:e0:40:0f:8a:cc:
c4:04:04:13:30:b3:95:d6:e5:48:94:10:ca:d0:e6:0b:f7:2a:
d5:9f:fc:09:13:92:29:36:16:b2:07:1b:12:d3:2e:c2:c4:cf:
8a:20:55:ca:57:0f:2e:61:5a:c5:b8:bb:62:cb:03:76:0a:46:
32:ff:0f:50:59:f5:99:77:63:49:45:5b:3b:ee:37:00:f1:34:
54:e8:ed:41:e4:c7:51:24:72:8a:4d:08:f0:88:bb:5a:d1:2c:
e4:3c:c3:5b:6a:0c:1e:28:3f:dd:9b:c3:88:a1:32:65:e8:89:
b7:e5:a5:5a:e5:81:6c:cb:da:65:3f:38:2f:e8:e6:bc:5b:38:
8e:bd:51:d5:56:59:c2:fe:d3:3f:3b:e1:a5:c1:a6:3a:e1:22:
1f:ba:07:a7:5d:78:f5:95:5b:81:d4:58:0b:9f:42:1c:84:31:
24:db:77:69:3c:1e:88:3b:65:2e:4f:ed:11:2d:24:5a:74:39:
63:5a:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:59 2025 by rpki-client