Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa
File: 96c3f96c-fa15-3ebe-8307-e0e08190b905.roa (raw, json)
Hash identifier: mZCxZwG3Zv/lxN1ljB+nbu9x5nfDSkriWXKx+eHc0wI=
Subject key identifier: EF:A3:96:EE:29:8D:EC:B7:D0:97:00:8D:D4:80:C3:34:7C:66:56:A8
Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial: 010D0C9F432858488DAB4DAA03D7E2A0E8DE0A00
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 62563
IP address blocks: 198.57.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4d:aa:03:d7:e2:a0:e8:de:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=0f2978ab-4357-4af8-8c1b-c8d61f3e1702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:ae:27:79:e8:5c:25:5e:0c:ec:47:bb:6d:
13:eb:c5:11:5b:48:7b:9a:ed:36:69:3a:8f:14:dc:
0e:96:9e:b9:62:e3:70:74:32:8a:67:bd:3d:b2:9f:
b3:42:0a:69:36:f7:11:f0:11:ff:7e:7e:b7:4a:f1:
7d:36:3a:87:87:01:af:fc:86:07:2b:3a:24:b7:f8:
b0:64:e1:37:06:44:14:73:ed:24:5b:c5:b2:57:ba:
12:68:52:09:36:ed:ae:d6:c6:24:1d:66:91:87:0b:
7d:ea:75:aa:48:b0:45:1f:7e:ee:03:f6:a9:d3:30:
ac:95:81:64:5b:5a:12:c1:a8:6f:db:1d:fc:6a:08:
90:6e:5b:d3:aa:bf:96:79:82:3a:cb:69:04:6f:06:
c8:70:b7:c0:63:e7:4a:9d:ca:5c:e8:ff:1b:13:2d:
43:f7:08:9e:be:51:6b:3d:c8:2d:01:eb:ca:3a:9b:
b2:7e:ad:cf:3e:ae:32:3c:66:bf:ac:67:a6:b5:98:
95:a0:ac:67:c9:42:c9:e4:19:e5:c8:75:cf:49:18:
08:35:01:73:36:30:20:30:67:85:91:e1:db:46:d2:
39:c8:e8:12:6c:34:d8:a6:6c:88:b9:b2:db:fc:a2:
0b:31:c1:0f:ba:91:5a:d9:37:e6:c2:e6:1b:c8:0d:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A3:96:EE:29:8D:EC:B7:D0:97:00:8D:D4:80:C3:34:7C:66:56:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
X509v3 Authority Key Identifier:
keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
sbgp-ipAddrBlock: critical
IPv4:
198.57.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:ad:02:3a:3b:bd:f3:9d:2c:3f:e7:43:f9:6f:c7:14:db:05:
8f:cc:26:f8:b5:8d:18:2d:f7:f8:c2:9e:0b:b6:9a:c3:ba:51:
29:08:9b:93:1c:ed:55:1a:b9:ad:00:1e:c3:2e:5f:73:a0:8a:
db:b3:64:09:94:c2:05:05:9c:4c:71:8a:79:b8:f6:f2:a5:1b:
7a:9b:ab:4e:92:f0:8a:e8:4f:32:3d:45:55:aa:ba:ff:8f:be:
96:13:23:23:ab:76:16:aa:f8:7b:3e:d5:f7:50:38:cf:1a:90:
80:04:c5:63:15:fc:22:cb:d1:0e:34:aa:2d:20:a2:61:9b:a8:
1b:a1:2f:51:04:b4:b6:79:58:f6:fe:f5:ca:c9:17:63:09:86:
05:6c:29:82:0c:8e:3e:a9:24:26:59:13:6b:e6:4d:19:85:ef:
0f:1c:85:07:ea:cc:d3:d3:1c:ae:6e:06:38:62:36:d6:61:19:
b6:d1:ee:3a:b1:5e:54:00:2f:5f:fc:c5:ad:02:73:70:97:4c:
8d:79:ed:64:52:c9:5c:42:94:bc:52:ed:6c:ee:6e:4e:1c:01:
9f:7e:c1:83:3a:06:81:45:9a:77:e4:21:9d:91:bb:a2:f9:38:
a5:32:4a:cb:21:26:0c:af:34:32:d6:bf:e6:a8:71:69:18:83:
eb:85:a3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:58:52 2025 by rpki-client