Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/fb820e4b-11eb-3e6d-9c44-16a5d9b29801.roa
File: fb820e4b-11eb-3e6d-9c44-16a5d9b29801.roa (raw, json)
Hash identifier: aE4kGkSXu9pgERqW/l1eQ70Qzsmrobps4HTwtt3lPLo=
Subject key identifier: C5:2F:DC:73:D6:29:77:FA:5B:CB:E9:C5:5B:23:BE:A3:67:F0:40:63
Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial: 010D0C9F432858483CB56872599B7386CBD0ADC0
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/fb820e4b-11eb-3e6d-9c44-16a5d9b29801.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 3300
IP address blocks: 198.207.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:68:72:59:9b:73:86:cb:d0:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=a95b0bb6-efc1-4adb-80c4-f8006ddb42d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:d2:2e:53:31:d0:48:86:ab:c1:50:f1:2d:
54:80:13:16:9a:0b:ee:ca:9b:e7:64:46:93:57:46:
f1:89:fc:03:61:b0:c8:13:e9:3f:66:30:aa:5b:f7:
7b:b4:a4:83:8b:c9:02:46:69:c5:bb:5a:7f:b1:fe:
9d:fc:17:59:c9:c2:3f:e4:82:96:05:92:bf:1e:f2:
a7:a2:0a:34:41:3e:1b:3d:a2:52:87:c9:10:03:a9:
b0:53:04:7a:a0:12:49:4e:2d:92:95:cc:55:4f:85:
44:f0:5e:bc:1f:08:6c:bb:11:db:30:f2:f1:37:3a:
1b:d4:69:4a:9b:29:95:38:26:8b:95:06:c8:57:ac:
68:9e:a2:b7:c5:25:77:33:34:8a:ca:d7:ba:74:a4:
d2:53:5c:a7:da:58:11:0f:1f:01:51:47:90:60:f7:
69:4b:c5:ec:0e:d1:7c:2b:c1:e2:8c:e8:5e:89:81:
a2:ca:01:93:fc:d8:60:cb:37:48:4c:38:6c:bd:65:
0e:23:a9:da:c0:0d:55:ff:17:74:1b:d9:d4:d8:cd:
9b:7c:31:1f:95:0b:c3:fb:d8:03:3a:90:59:4e:e0:
9a:f5:ec:47:05:72:76:5c:35:30:55:1a:b2:fb:ce:
cc:c0:f9:26:26:a1:60:11:9a:15:85:3b:bf:49:cb:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:DC:73:D6:29:77:FA:5B:CB:E9:C5:5B:23:BE:A3:67:F0:40:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/fb820e4b-11eb-3e6d-9c44-16a5d9b29801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
X509v3 Authority Key Identifier:
keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
sbgp-ipAddrBlock: critical
IPv4:
198.207.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ec:23:00:a9:0f:e3:98:25:6b:ab:af:ea:8d:e9:34:ae:02:
33:fc:1b:10:88:ad:78:af:79:9c:5f:00:d1:28:cc:07:2f:32:
c2:10:e7:65:33:93:a4:50:c0:ce:09:ea:c1:3a:7c:da:4c:61:
45:76:22:7d:d5:ec:3c:95:66:10:b9:cf:19:a2:36:25:0f:db:
68:28:da:9a:e8:54:60:06:11:a4:4a:d2:7b:3f:c8:ee:b4:da:
e3:9c:bb:9e:f0:da:5a:a4:8b:b5:ba:87:c4:e9:b6:10:35:04:
fb:d2:f2:04:d9:8f:ac:da:b8:24:f9:05:5e:72:9e:b2:a5:eb:
c8:dd:6d:a1:f7:eb:5d:99:f8:0e:7c:02:54:cc:67:09:e7:bb:
9e:d2:0d:9d:98:50:01:2b:b0:ff:fe:c4:65:ee:6d:dc:c0:23:
2c:a7:f2:02:f6:ff:ce:ab:1e:00:1d:e3:d5:63:50:38:6d:b2:
43:21:16:8c:ee:b6:b7:99:bf:fc:08:7b:a4:10:bb:ca:6d:1b:
6b:c6:79:d5:81:80:6b:30:23:dc:51:e8:37:b7:2b:79:e1:ee:
1f:42:fb:37:c4:c5:27:80:b2:be:ae:fb:35:b9:a4:b9:11:67:
b1:6b:a2:46:a3:5f:32:bb:62:f4:ca:00:3c:2d:ed:43:0f:a7:
19:91:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:36:34 2025 by rpki-client