Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa
File: e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa (raw, json)
Hash identifier: QFp1Bl/9MSGI1kKwQeVaurJcZ3EXQdGybVgKV2Lu0cc=
Subject key identifier: D4:EA:73:58:5C:AB:C0:31:B1:4E:4F:56:E0:A3:15:0B:67:08:AA:65
Certificate issuer: /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Certificate serial: 010D0C9F432858480214F6C6F1EBADE99439E480
Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 62827
IP address blocks: 158.51.232.0/22 maxlen: 22
198.17.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:f6:c6:f1:eb:ad:e9:94:39:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=35b76371-41fb-4fe8-945a-893c496683c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:b2:64:e3:27:0b:80:f4:fd:e2:8e:a4:54:
d0:cb:28:30:15:89:46:8d:55:dd:d3:d3:b9:75:6a:
4c:0a:3a:e0:56:e1:28:e5:fa:6c:62:de:48:3f:64:
51:46:97:09:f9:e3:6b:22:62:f6:09:69:8f:6f:a8:
db:22:3b:f8:3a:13:76:f4:22:13:1f:8c:b5:8d:88:
5b:85:98:85:72:33:b5:fe:20:93:40:78:6f:9c:cd:
db:53:e5:8c:5c:2e:c8:4e:b9:03:97:d9:ff:e7:a8:
17:4d:4a:bc:f6:ec:f6:d8:9f:33:b9:77:99:68:cf:
d5:68:b6:d7:21:24:58:18:c2:21:a6:a8:04:a0:f2:
a5:6b:7b:91:b8:15:24:8f:c6:6e:85:e8:4b:5c:09:
fd:4c:49:d3:3c:b3:1b:09:66:5b:d7:c2:ec:0b:9c:
b8:66:9c:98:33:8f:9c:02:c9:1a:c8:e6:a6:5f:ff:
67:dd:9a:35:bf:51:af:c1:16:86:4a:76:d0:88:8a:
d5:33:d9:2f:a5:f8:03:6e:73:d4:3a:1f:bc:dc:bb:
d5:58:11:39:2a:2a:a7:2b:b7:17:30:e0:5b:ac:d4:
e5:15:44:c6:a7:b4:44:1e:0e:07:ef:0d:8e:8d:25:
2f:c7:d8:5a:0f:3e:9b:a4:38:45:92:af:b1:8c:78:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:73:58:5C:AB:C0:31:B1:4E:4F:56:E0:A3:15:0B:67:08:AA:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl
X509v3 Authority Key Identifier:
keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.232.0/22
198.17.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:77:f5:3d:c1:25:7f:f3:00:1f:dc:e1:5a:2b:76:3e:9c:3f:
e0:af:79:40:64:b7:df:25:d3:79:d6:7b:b7:fd:9b:51:68:1e:
f6:00:7f:6d:41:5c:bc:29:24:fa:6e:cf:7e:ef:56:e3:9a:ab:
6d:91:6b:0a:0a:29:7e:8e:7d:fa:c1:5e:8d:48:1d:d1:f1:0c:
fa:b3:6d:18:d8:47:15:66:25:fc:4d:e4:e2:ec:86:61:32:94:
9f:d3:6d:14:f3:50:ff:fb:7a:ab:b1:e8:a2:b8:93:32:16:bd:
91:08:76:7d:15:af:d6:61:8f:f6:06:2d:9b:da:24:22:28:7d:
10:f6:9b:0d:06:89:c6:c1:ea:10:5e:e7:53:6c:41:e6:f9:af:
a7:95:bf:9d:96:20:00:86:97:56:5a:4f:45:1c:1b:fb:3c:af:
ef:10:ec:47:9c:23:9e:5c:55:08:46:23:b0:da:1d:ce:7a:fb:
e7:cc:bf:1f:7c:e8:2f:3f:35:02:df:13:1e:16:60:e5:91:17:
73:ff:77:2b:d0:d5:81:d1:ae:af:2a:27:0f:a2:dc:c5:39:00:
3c:99:c2:b2:a8:ec:04:a8:f9:fd:b1:95:28:16:2d:8d:08:92:
57:47:3b:b4:18:ce:3a:be:3e:20:1a:41:99:1d:aa:ea:a6:f2:
e2:2b:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:09 2025 by rpki-client