Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa
File: ff08339d-585d-3340-b3f1-2b16c2469a4a.roa (raw, json)
Hash identifier: xaxj+OxnmVfJSPOmoFPsM0+8sPWuCAtSe6Wb/oOFbQs=
Subject key identifier: A0:04:DE:2C:8D:6A:AF:40:1C:A3:F3:C0:54:E4:33:5E:9A:E3:EB:04
Certificate issuer: /CN=7486d668-0b59-485d-a30a-dbd53fab21fd
Certificate serial: 010D0C9F4328584839EACB5573DE82D59EFDC880
Authority key identifier: 6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 16668
IP address blocks: 198.202.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:cb:55:73:de:82:d5:9e:fd:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7486d668-0b59-485d-a30a-dbd53fab21fd
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=d92d3ec6-5b05-45a8-bf4f-ce9e91d377f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:d4:48:ce:d4:44:7b:74:94:cb:09:b1:86:
a6:29:50:f9:ce:34:45:46:f6:e3:2f:c9:82:ec:f2:
34:61:cd:41:16:01:40:f7:7b:d2:83:85:13:9a:c4:
6e:d3:03:ea:ec:01:cb:b3:20:e2:0e:18:3e:a0:96:
83:97:80:06:84:60:c7:2c:fa:51:de:dd:a9:67:a2:
df:9b:d8:90:16:9c:b6:18:aa:bd:f6:2a:1f:6e:c9:
d4:b4:59:10:91:89:f6:91:3b:e5:1b:da:85:62:61:
2d:c4:fa:3e:e4:03:90:d4:b9:e1:0b:ce:46:58:13:
5e:32:b8:97:ab:73:db:62:0a:cb:fd:e1:eb:a2:40:
3e:42:46:4e:7a:ae:50:b3:95:f9:b8:23:0a:e9:e8:
68:f4:19:07:9b:79:3c:26:c9:17:c4:09:e9:89:da:
15:14:ef:67:89:be:cf:0d:a8:5e:18:80:94:cb:69:
0e:a3:8f:94:99:0a:9e:3d:c4:03:14:6e:cd:02:67:
b8:9a:6b:bd:13:5b:36:cc:21:b7:df:ee:d5:41:d4:
bf:0f:f4:cb:d6:29:e1:a3:3a:aa:cc:5d:23:50:09:
bb:40:b4:9c:c1:a5:f4:5e:3b:0e:f3:10:08:b4:d0:
b5:f8:05:4e:19:a0:f6:41:0b:24:73:9b:a7:7f:19:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:DE:2C:8D:6A:AF:40:1C:A3:F3:C0:54:E4:33:5E:9A:E3:EB:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.crl
X509v3 Authority Key Identifier:
keyid:6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer
sbgp-ipAddrBlock: critical
IPv4:
198.202.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:df:af:74:fe:5f:cc:1b:09:37:9a:ab:16:9f:5f:e0:43:f1:
3c:d6:b5:89:62:b0:ff:f5:b8:c4:e2:3d:9a:8c:8d:ab:42:a2:
37:4f:11:c2:ca:8f:b5:48:08:3d:2e:42:a4:09:a1:4a:9e:06:
c3:fc:b1:6b:49:82:42:8a:8c:e4:d8:99:40:e8:11:b0:c9:f1:
58:3d:cf:23:8d:a2:fc:5f:f7:cb:8e:bd:c7:06:16:3d:f2:d1:
2c:c4:4d:77:7f:e4:1a:23:b5:e2:d0:7a:d9:45:f7:d1:6f:2f:
12:71:ee:6a:a5:b5:55:a7:18:42:21:ee:70:ce:fe:4b:30:d8:
0d:eb:aa:a9:00:02:3e:da:c0:fd:82:a9:0e:7b:f3:3f:dc:28:
39:5c:46:fd:21:c2:ef:e4:c3:a8:12:81:aa:a6:28:9a:09:68:
1e:8b:d1:06:f3:80:da:cf:d8:7a:07:8b:0d:5e:b5:c3:f5:c1:
38:21:1c:25:fc:79:c8:03:bf:00:96:fd:4a:cc:a2:5c:96:1b:
11:3d:ec:27:d0:0a:cb:97:ae:7a:cb:8d:f9:ed:51:8f:28:18:
3c:3d:3d:68:cf:cc:9f:e2:a9:c8:0e:2d:88:f8:30:ea:9c:24:
aa:63:4c:e5:b5:e5:68:69:25:e1:c3:65:45:6e:fa:69:59:90:
aa:14:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:24 2025 by rpki-client