Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2907bd3e-7be7-3179-abfd-3af4b6724521.roa
File: 2907bd3e-7be7-3179-abfd-3af4b6724521.roa (raw, json)
Hash identifier: Qsp0iFnPFbBo8kxd2YUG/hu5nj/2oV7EsKQ7EpIPNIQ=
Subject key identifier: 36:22:BD:85:28:32:AE:12:65:5B:A1:82:36:3A:E1:31:0E:D9:02:38
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584855D595C3C4F4AC69C3D17600
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2907bd3e-7be7-3179-abfd-3af4b6724521.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 262287
IP address blocks: 198.145.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:95:c3:c4:f4:ac:69:c3:d1:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=454c5736-3843-497a-8c49-1b0f63dcb35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:5a:20:59:a1:39:4e:3e:80:d6:95:35:79:
2e:dd:d8:4c:77:af:78:2d:88:27:95:06:4a:09:da:
a9:2e:9c:54:d1:7f:7d:d5:dd:56:97:95:4c:25:e0:
e6:10:d7:36:8a:88:ac:d8:cf:1a:58:fa:c4:fc:4d:
b0:84:18:fb:38:24:5d:3e:fe:98:95:8e:3f:9d:34:
7b:c0:14:07:0b:22:ed:96:33:d2:36:14:c9:8d:66:
30:b4:30:2d:19:e8:ba:d9:66:f6:55:6c:57:79:98:
94:86:5c:b1:a9:f4:d8:cc:e8:9d:df:58:18:74:fe:
7b:b6:74:44:f7:b3:b6:43:99:42:b6:5c:54:d6:18:
7e:68:85:bf:fe:44:13:32:31:b8:44:0f:0f:a8:8c:
a0:e8:04:82:ac:91:a5:a7:f4:be:4b:25:8a:f6:bd:
9d:83:1d:87:d6:aa:af:c3:b7:72:34:17:70:d9:0e:
aa:51:ba:7c:e2:46:aa:d2:1f:11:af:0b:11:83:fe:
73:85:12:09:17:a4:8f:96:61:e6:d3:75:13:aa:9f:
78:aa:27:3a:b8:70:4e:05:44:ac:e0:03:40:c8:ae:
66:20:db:5e:d7:d8:5e:6a:cf:eb:29:bd:28:1f:c6:
fe:3e:3d:5a:77:f8:e1:70:49:02:a6:a1:fc:4f:f8:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:22:BD:85:28:32:AE:12:65:5B:A1:82:36:3A:E1:31:0E:D9:02:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2907bd3e-7be7-3179-abfd-3af4b6724521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:41:d1:72:be:d1:39:cd:11:c7:13:d9:d5:36:8a:05:b8:69:
7a:a3:5e:4a:cb:b0:22:4b:4a:2c:71:31:18:42:f2:e5:fc:f2:
ec:d6:11:f0:00:31:c1:cc:77:c4:4d:b4:7b:ea:d2:9d:d8:f6:
0f:93:b6:93:9e:59:d9:dd:c3:01:b9:49:fe:95:a9:52:ec:9e:
e8:60:3d:6b:7b:71:20:c5:85:a0:c0:71:01:14:3f:95:95:fc:
b3:37:88:8c:31:c4:3e:74:35:31:15:c1:b7:b2:47:75:e5:49:
31:bc:bb:0d:36:2d:63:f2:12:68:e6:a2:0b:64:0c:5e:5c:3f:
ea:a7:81:3d:34:c0:51:0a:15:29:55:6f:40:00:e0:39:2e:86:
60:00:71:77:ce:34:60:12:33:f9:3a:4b:84:a1:2e:34:83:c2:
fc:3d:18:37:d5:c8:80:bb:e6:b6:1d:85:3b:0e:5c:a9:29:ae:
96:51:56:f4:28:1d:2e:f6:d3:1c:d2:64:47:88:12:91:bd:b2:
f0:51:0f:42:cc:84:e0:02:6c:1c:b6:c0:7b:4f:b5:bf:75:f4:
3b:9b:08:69:23:ed:7b:42:9a:69:90:69:df:7e:4c:08:d8:cb:
64:82:3d:5e:78:cc:b2:ef:e8:e0:06:8c:80:b2:14:55:ed:46:
f1:3a:1d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:20:04 2025 by rpki-client