Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e52d3f3c-00b1-307b-a4ec-a20ef1706058.roa
File: e52d3f3c-00b1-307b-a4ec-a20ef1706058.roa (raw, json)
Hash identifier: nQ/YUBzA/P540glY3Wx8ObdDFa8gqVqgVHMXBvQYGso=
Subject key identifier: FD:9A:2E:06:1D:F1:F3:47:B9:70:E0:C1:AA:BC:09:51:F8:92:0F:1C
Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial: 010D0C9F432858488DBE89BC4A095484601D7540
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e52d3f3c-00b1-307b-a4ec-a20ef1706058.roa
Signing time: Wed 15 Jan 2025 14:39:46 +0000
ROA not before: Wed 15 Jan 2025 14:39:46 +0000
ROA not after: Tue 15 Apr 2025 13:39:46 +0000
asID: 7018
IP address blocks: 198.1.212.0/24 maxlen: 24
198.1.213.0/24 maxlen: 24
198.1.214.0/24 maxlen: 24
198.1.215.0/24 maxlen: 24
198.1.220.0/24 maxlen: 24
198.1.221.0/24 maxlen: 24
198.1.222.0/24 maxlen: 24
198.1.223.0/24 maxlen: 24
198.1.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:be:89:bc:4a:09:54:84:60:1d:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Validity
Not Before: Jan 15 14:39:46 2025 GMT
Not After : Apr 15 13:39:46 2025 GMT
Subject: CN=ef9977fb-e9c3-4074-966e-9e2df53ab7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:f3:04:53:14:f2:b8:fc:6a:00:48:7e:7e:
e1:09:72:f6:15:5d:d3:8c:ab:0e:08:24:f8:c6:06:
ff:9b:e7:b1:a9:8e:7e:a6:3a:76:74:90:01:08:b9:
a9:8f:cf:12:13:3d:95:be:84:e2:fa:e1:eb:4e:67:
be:ba:13:fe:42:a8:bb:7a:ee:4a:2d:2f:f9:36:4e:
0a:f1:f8:97:d0:23:90:ad:e8:41:8a:b6:17:61:9b:
ee:39:bc:d4:f9:c7:62:ab:5f:fb:12:8e:e8:ea:dc:
42:e5:21:e7:4d:31:2c:a7:d5:e4:97:64:03:f5:fb:
11:9c:3a:d3:f8:77:73:48:79:c7:c4:21:9c:24:4b:
4e:8d:94:0b:7a:c3:d7:cb:41:38:15:d0:4e:5e:ea:
89:b8:95:b8:22:4a:98:a7:59:f4:81:05:bc:b1:27:
19:59:e2:be:fd:97:cf:a6:1a:d8:f6:ac:ec:d1:06:
15:70:ef:ee:ef:a2:13:56:03:56:da:08:c1:e6:bf:
27:84:13:6a:21:58:2a:19:e8:0d:1b:00:c9:bb:24:
af:9d:ed:40:27:18:e3:af:b9:94:2e:66:56:d6:9f:
7b:8a:47:70:4f:a2:bd:58:af:0e:9a:3f:b7:e8:bc:
ec:57:c3:f2:ab:ab:b7:d5:ef:06:c9:cd:25:2f:44:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9A:2E:06:1D:F1:F3:47:B9:70:E0:C1:AA:BC:09:51:F8:92:0F:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e52d3f3c-00b1-307b-a4ec-a20ef1706058.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
X509v3 Authority Key Identifier:
keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.1.212.0/22
198.1.220.0/22
198.1.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:2b:1b:05:5e:fc:28:c7:ef:f0:9a:e5:4e:a4:a7:5b:bf:66:
d8:10:11:4d:64:96:ff:d2:f1:eb:94:72:9a:66:cb:ff:74:04:
7d:09:62:77:40:ca:5f:e9:c5:e3:38:c4:f2:07:22:57:2e:32:
77:bc:70:35:ce:05:5d:20:08:8d:51:6e:a0:f6:29:b5:18:7f:
f2:eb:a5:ed:41:b4:d5:05:ff:dc:57:46:ea:05:ad:5a:3a:58:
39:d9:12:1d:0e:e0:ff:56:24:ec:8a:38:22:b3:d5:9d:28:c0:
19:8b:62:51:0b:9e:f6:3b:2e:76:51:51:22:3c:89:e5:b0:5a:
51:ac:77:70:22:01:96:3d:9f:0f:96:c2:b3:04:0f:06:2f:dc:
77:82:25:45:1a:ce:68:94:bf:ed:2f:ca:57:c0:b1:43:68:9e:
75:5e:32:11:da:0d:01:99:ba:45:fa:01:69:58:ff:ee:b2:a3:
45:9e:00:26:2c:b8:92:32:47:2b:65:83:4f:47:0c:98:f1:e7:
f3:66:7b:25:1f:90:ee:66:c0:85:2d:60:fc:4e:71:10:b3:62:
a5:a8:63:34:97:40:65:9b:26:97:95:b5:db:96:f5:a2:83:18:
47:c3:12:8c:e6:7b:5b:b4:a6:e2:7f:a7:ef:8b:65:4b:ce:8d:
90:0f:28:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:23:13 2025 by rpki-client