Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa
File: a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa (raw, json)
Hash identifier: Y/Yjlzt0VYRge4mzDtemKeZxawOockolH2eE9N0ZX7g=
Subject key identifier: D0:7C:7E:CA:77:C0:BF:9F:8E:DE:D8:13:B5:79:DA:DD:8E:9F:43:D8
Certificate issuer: /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial: 010D0C9F4328584845971909E5ECA4BC8B596E80
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa
Signing time: Fri 20 Dec 2024 18:22:06 +0000
ROA not before: Fri 20 Dec 2024 18:22:06 +0000
ROA not after: Thu 20 Mar 2025 17:22:06 +0000
asID: 17024
IP address blocks: 198.135.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:97:19:09:e5:ec:a4:bc:8b:59:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Validity
Not Before: Dec 20 18:22:06 2024 GMT
Not After : Mar 20 17:22:06 2025 GMT
Subject: CN=957a7303-e149-4e67-bc1c-bcde4269371d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:93:fa:fe:81:fd:db:02:1d:0b:2d:14:67:
23:2d:dc:fa:56:22:c3:75:9e:0a:5e:b5:50:75:45:
0c:d4:ab:c2:fe:b1:86:e7:5a:ee:ef:cc:28:7d:67:
92:f5:eb:1d:1c:eb:da:25:19:f0:e6:2b:a1:7d:1f:
9b:c4:03:90:07:5f:80:24:0c:c7:cc:60:2b:49:4d:
aa:12:83:13:99:84:a8:7f:3c:5b:fd:55:4f:aa:19:
28:36:1a:9a:8d:c6:6b:17:8b:54:f4:7f:b1:1f:fc:
fe:61:3d:48:ee:a9:56:41:3f:de:62:4b:72:b1:d5:
7e:60:be:d7:df:b9:0d:fb:36:aa:da:b6:72:4f:bd:
57:dc:c4:29:33:72:6b:15:da:0e:03:14:de:ca:a1:
77:96:19:a9:19:7b:ed:7b:a4:31:57:dc:4b:06:7b:
fe:0d:51:a0:f6:b3:b8:4e:f5:60:75:94:53:74:85:
8d:cb:5a:f5:d4:26:b5:8a:ea:d6:63:9d:d3:8d:8a:
90:9b:42:18:1f:3f:6b:1e:d2:4c:87:84:c6:97:51:
2e:6f:17:6b:db:4e:1d:bd:09:b6:dc:a3:b4:8a:cd:
7e:b5:ea:ff:41:04:0f:a3:a6:3b:bf:cb:43:b8:5b:
e7:54:93:a4:f5:c5:16:81:50:a2:6e:d1:4c:d1:9a:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:7E:CA:77:C0:BF:9F:8E:DE:D8:13:B5:79:DA:DD:8E:9F:43:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
X509v3 Authority Key Identifier:
keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
sbgp-ipAddrBlock: critical
IPv4:
198.135.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:a9:60:dc:46:c3:fc:aa:98:d4:90:bb:a5:d7:5e:1c:43:a9:
b1:ad:55:6e:0a:2c:91:6f:94:8b:98:4c:e6:a4:29:97:77:88:
b2:f8:bc:cd:cd:52:89:aa:61:e9:d4:ce:e6:0b:8a:db:07:5c:
8a:d9:d0:ce:b2:f3:39:94:31:5e:96:bf:e3:97:1c:52:5a:10:
93:2d:a2:ba:8e:1c:b9:b7:6b:c9:68:48:cf:17:5b:4c:ad:02:
51:94:9d:e5:8d:37:7f:dd:6f:f0:41:f7:a1:ea:8d:26:b9:c2:
8d:2c:05:7d:74:76:96:00:86:32:69:0d:b7:20:72:8a:84:ae:
e3:42:d8:3f:20:90:e8:fd:80:8b:78:77:56:9f:63:e9:09:f4:
1d:cd:21:fd:25:41:59:73:68:c1:fa:60:e2:b9:60:38:d5:b2:
73:d2:c6:88:cc:fb:99:f8:c0:84:eb:ec:80:b6:31:50:c5:be:
00:a2:bf:32:b2:e9:3c:fc:8f:fd:b6:fc:df:2f:cf:0d:87:8c:
3b:09:f9:8e:91:f4:10:13:59:c7:e7:94:9b:5a:1b:2f:16:27:
b4:bc:d3:eb:e0:11:87:a9:21:61:62:ce:ad:02:0a:3e:cf:05:
ef:fa:e3:70:ac:f7:02:69:f3:2a:f1:85:ad:6c:b7:05:24:ff:
cd:72:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:28 2025 by rpki-client