Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa
File: c95177a4-9ed4-315d-96d5-2797939b3f4a.roa (raw, json)
Hash identifier: alZjA0ePENKyzrLyE18U6/qMQG49qBk1/6ouVEXFQOQ=
Subject key identifier: 27:DA:D4:5F:D0:41:51:37:0D:6B:4C:97:97:50:63:27:45:5F:51:A1
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F432858484AAAE2A390FF528A2DCEF700
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 14192
IP address blocks: 198.150.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e2:a3:90:ff:52:8a:2d:ce:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=a20e3681-8b67-47d7-a5fa-de6400768494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:c6:03:2a:70:48:45:20:83:5b:bb:e5:21:
16:a9:15:6b:5b:ad:94:77:83:c6:a0:15:bb:fc:67:
17:68:d3:13:39:4d:b6:2b:e3:b2:d7:ba:6c:56:da:
fb:53:75:3c:56:9e:73:cf:8b:2f:6e:12:b2:e9:c5:
3b:33:96:28:ca:b4:10:43:72:c0:45:07:fa:f6:87:
b0:54:b2:f5:f8:ff:90:4e:d5:07:ce:df:ee:6e:cf:
55:d5:b7:7d:3b:54:41:c5:11:20:d2:99:35:46:e8:
6a:a8:bb:54:b3:3c:77:8d:c4:f7:36:ba:cc:a6:67:
23:ec:dc:a0:0e:e6:25:91:87:b6:06:c6:2b:f2:ea:
33:54:48:44:2b:2d:f5:76:ec:34:e0:99:aa:49:ac:
39:f6:90:aa:28:84:be:ed:99:de:bc:db:5d:3b:c7:
c0:d2:7a:82:96:8f:9a:71:b1:93:42:28:61:ce:d8:
ad:0e:1c:11:0a:5e:6f:59:9f:7e:c9:ca:b6:fc:d0:
53:e6:ed:fc:0d:a3:a8:2b:ff:3f:6e:02:66:8b:b7:
5f:9a:65:26:ea:33:28:d7:5f:cd:44:ab:16:ee:e8:
f2:ee:f3:e8:0d:9d:64:aa:41:31:1d:fd:33:ff:b0:
5b:06:b5:ac:37:c7:14:f6:7c:ea:1a:81:7b:11:9d:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:D4:5F:D0:41:51:37:0D:6B:4C:97:97:50:63:27:45:5F:51:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:b4:97:54:6f:ed:30:20:45:bb:c2:db:c1:4f:ac:fe:d1:4b:
36:d5:a3:a5:37:2d:c9:ce:60:dc:db:0a:4f:64:39:da:52:51:
3b:55:5f:75:81:18:3a:88:3d:67:3c:3e:74:85:57:6d:2f:4c:
d1:a7:02:61:5e:56:0b:95:d3:09:06:77:14:f6:aa:68:cf:47:
5e:a3:7e:55:03:5c:e0:eb:db:76:68:83:bf:76:9b:cf:66:9b:
88:17:0a:43:0d:de:48:8d:92:b1:5a:6a:70:65:9b:aa:79:c5:
e8:5e:f9:6c:81:c3:37:43:10:7c:d7:b2:85:dc:5a:f8:07:6d:
07:ac:73:d5:ea:ab:61:f0:e3:73:f4:07:60:12:ff:f6:7d:9f:
d6:8f:df:0c:2a:02:10:ca:79:bc:82:73:65:6b:fc:97:e4:7d:
0e:69:1e:a5:7b:e7:1e:e0:5d:71:13:a8:b7:d8:af:1a:10:cf:
91:ff:d9:41:ff:aa:c7:85:1f:4c:98:8d:30:14:87:6c:49:65:
ef:0f:ca:12:bf:ed:32:77:50:bc:37:b2:c6:7c:4c:4e:35:1a:
da:7a:a5:c4:a9:bb:de:db:fb:cc:f9:fd:87:f7:24:b9:36:57:
7b:3b:86:04:f3:2c:e8:5f:59:d8:e5:62:8e:ad:70:03:2d:8c:
6a:18:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:12 2025 by rpki-client