Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa
File: d69391f3-6e1a-3ee4-8354-30ffcd168588.roa (raw, json)
Hash identifier: 7YJ/n71NV1NhReVajI9MGaLkksqoAiKiaB0NJ0wgR8c=
Subject key identifier: 9A:0D:4F:EE:52:B3:BB:48:FB:06:39:74:6F:58:4B:22:28:B7:38:72
Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e
Certificate serial: 010D0C9F43285848960B564CD9D88EAA41DFBF80
Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 11758
IP address blocks: 198.231.28.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:56:4c:d9:d8:8e:aa:41:df:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=c96cdd97-e75b-42bb-80cd-c0f45152e16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:10:2d:67:3d:fa:3a:47:c9:bb:72:b9:8f:
b9:1a:28:0e:fd:e9:22:72:2d:c1:f3:41:5b:c3:82:
7b:5f:7e:77:a0:fe:58:b6:13:25:dd:a4:9a:d6:bd:
9a:fe:c6:7d:cb:88:c6:6b:cc:62:cb:42:58:b7:a8:
db:0d:97:74:40:cf:88:fc:28:85:85:f3:1c:f3:7c:
e5:9d:db:2a:53:e6:e8:18:50:f7:e0:f3:2c:53:0d:
5f:b3:eb:6c:b7:50:58:01:aa:f9:d4:91:7c:94:bf:
55:7a:cd:be:e1:29:07:9e:41:3c:9e:3e:89:84:52:
a6:bf:97:78:03:d4:5e:4b:f6:58:3e:4f:f5:55:7c:
c1:e6:fe:a2:df:ad:0d:74:ce:69:a7:f0:80:22:9d:
27:38:f3:3f:76:18:14:88:14:e1:6e:4b:eb:d9:91:
7c:e1:4f:b8:81:d2:ee:dd:fa:18:71:ba:c8:58:6f:
61:c2:74:95:8f:ab:60:7b:ae:58:ad:b8:eb:66:bc:
b1:c9:bf:62:57:45:a4:4a:d1:83:93:bb:8a:f8:ac:
bf:b1:41:bd:92:3d:ed:bf:89:30:74:7b:3d:b6:39:
f6:1f:20:b9:0b:fc:6a:b5:90:b8:a7:c6:ce:87:b4:
0b:5f:0d:eb:7b:9d:1d:6f:20:b6:5e:e3:f4:cf:02:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0D:4F:EE:52:B3:BB:48:FB:06:39:74:6F:58:4B:22:28:B7:38:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl
X509v3 Authority Key Identifier:
keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.231.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:ee:34:91:a2:5b:34:1c:4c:56:1c:cb:23:ae:1a:6b:7e:f5:
71:e2:38:2e:76:bf:13:0e:ae:6b:c6:42:d8:ed:8d:8c:95:8a:
a1:7f:63:c8:78:18:b0:7f:d8:5a:b4:5f:8b:a4:21:1c:25:52:
b2:60:49:13:c1:7f:1d:45:b0:c7:45:aa:61:ba:0c:01:a2:b3:
5e:e5:fc:44:fe:d0:24:1d:5a:74:86:ad:da:3f:22:df:e2:49:
61:d0:5e:c8:ae:65:ae:f0:48:69:84:d1:4c:ff:8b:f9:a2:87:
c4:01:be:61:dd:40:d9:18:bd:6e:1a:0d:31:e0:fc:23:80:e4:
07:c1:56:07:4a:f2:99:36:6e:ab:57:01:7a:fb:74:48:bc:b8:
39:d7:0b:1b:b8:18:54:4b:88:26:14:65:92:86:61:45:26:a1:
d4:77:ed:b7:c0:81:c3:d7:7a:5b:b1:81:ad:82:21:83:19:f4:
f9:6a:2d:64:92:ff:6a:3a:0c:df:fc:e7:c8:f0:4a:e4:b9:b9:
10:a7:c2:59:be:4a:18:02:68:18:d5:b0:87:37:0b:82:e5:e7:
ff:c5:7f:a6:52:8a:3c:48:4f:31:e2:49:ae:94:f1:2a:a2:e5:
11:56:a2:b3:1c:d0:62:e9:a7:c2:26:18:01:be:28:96:49:19:
ad:50:1f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:13:06 2025 by rpki-client