Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/90af2769-7f16-31b3-968d-f44903a579ac.roa
File: 90af2769-7f16-31b3-968d-f44903a579ac.roa (raw, json)
Hash identifier: /6gKqNfEeJt5Xm9p26rEwFx4b4sQ/4Heg8oCIpW/Fv4=
Subject key identifier: 3B:21:0E:42:43:F2:2D:24:E7:F2:21:9A:E6:B3:BE:4D:BE:93:C4:89
Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial: 010D0C9F4328584871C0734F9B89E40399886CE0
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/90af2769-7f16-31b3-968d-f44903a579ac.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 19163
IP address blocks: 192.228.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:73:4f:9b:89:e4:03:99:88:6c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=4088f454-e93c-4c9e-94d6-c647326b0633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:5e:88:2f:a5:a5:f9:e5:53:73:8e:19:e5:
12:65:80:9c:55:1b:a2:bf:c3:1f:89:3c:59:6d:64:
ea:9c:84:5a:66:68:5c:dc:df:a2:b2:7e:2f:05:c6:
4e:4e:b5:e0:bf:55:ad:95:48:4a:e5:d5:f3:28:40:
07:c3:4a:65:94:d2:99:76:86:04:78:98:2f:e3:6c:
9a:9a:7a:f9:64:89:73:fa:e6:77:40:8a:25:0e:6e:
66:db:22:e0:5e:0b:17:5b:1e:2c:98:07:4b:45:4d:
1d:c2:07:69:67:ea:e9:8a:db:78:bd:53:89:fe:3f:
98:4b:80:fe:e8:8b:d5:ac:5b:c6:de:ce:70:4f:b2:
d6:96:23:29:1d:a8:b7:c2:53:38:31:06:08:37:59:
26:fd:bd:a4:45:3a:86:30:52:90:a9:46:df:08:bc:
6b:97:7c:87:af:b8:e7:2d:8e:00:8e:05:dc:a4:c6:
58:67:0f:16:bf:72:2f:c9:59:09:96:94:fd:fc:e1:
5e:7a:ca:10:82:32:a3:5c:93:b8:cb:58:fd:0e:2f:
27:f5:1d:59:6b:7d:64:8c:91:c5:64:5b:f4:be:ef:
79:ea:57:e6:f8:07:8c:7b:84:f1:c8:95:fc:c0:27:
32:aa:42:20:51:ec:e7:0e:f8:4c:a5:9a:74:c5:be:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:21:0E:42:43:F2:2D:24:E7:F2:21:9A:E6:B3:BE:4D:BE:93:C4:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/90af2769-7f16-31b3-968d-f44903a579ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
X509v3 Authority Key Identifier:
keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.228.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:41:c3:0a:a6:fe:c1:8a:24:2e:ab:c1:fb:2e:9c:d7:e2:6a:
32:5d:4d:16:5c:53:3f:ad:6d:8c:ac:ba:25:7b:37:9c:05:fb:
82:4c:d6:4d:d0:a8:59:03:2b:f6:cc:7e:88:83:7e:d4:2c:ad:
be:9d:40:39:b3:1a:35:f4:98:ab:26:58:5d:95:9f:bd:c5:9c:
05:c3:de:0f:c0:25:77:8a:4b:49:37:dc:7e:dc:0a:35:55:e2:
7b:f3:24:fc:0e:79:e6:59:7c:93:e8:c4:b5:d3:23:c6:98:8e:
0e:ef:46:15:59:c0:e9:1f:9b:dd:a3:c3:11:0a:3a:90:f6:d7:
03:28:35:1c:5a:8c:4f:4d:76:52:a4:ee:ac:aa:a4:b3:74:36:
81:9f:5b:7a:30:d3:ea:2b:b7:39:4a:28:18:d6:f3:57:06:f5:
ff:a6:3a:10:7b:84:5c:f7:2f:d9:ae:5e:83:c5:db:1f:33:98:
78:2a:b9:20:a0:47:da:f8:26:c8:e4:e2:68:5b:33:26:00:c4:
bf:a6:13:da:15:69:d1:cb:cf:fa:3b:4e:bd:50:8e:e4:af:03:
b5:67:6e:55:fa:32:a8:2b:ce:07:18:9d:b2:9d:df:f0:be:b8:
47:65:76:b5:4d:21:0a:9c:08:23:06:ac:b6:21:1a:13:19:bd:
ea:57:3a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:24 2025 by rpki-client