Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa
File: a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa (raw, json)
Hash identifier: ymfzqVlsWzMp69djP67d5xPPGToUkD7zODDD687QD/4=
Subject key identifier: 68:9A:1C:3A:67:BC:AA:B3:95:DE:72:C4:96:E8:18:FA:01:63:3B:91
Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial: 010D0C9F4328584871C07B2D88D4AD1009045180
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 22612
IP address blocks: 198.187.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:7b:2d:88:d4:ad:10:09:04:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=3dd41f2f-4473-4dd1-8e7e-790041fce579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:f3:6e:8c:3d:e1:8c:3b:3a:e2:0a:f3:b0:
84:36:a0:31:45:7a:7d:3c:2e:ff:03:c3:cd:fd:37:
c8:21:a7:d4:95:37:54:44:0d:d6:7d:9c:7c:ac:1d:
5e:60:0e:32:07:18:77:ea:3e:f2:09:d6:44:9e:0a:
10:ab:51:98:7b:ee:df:46:69:e6:33:a1:ba:64:12:
de:ad:d7:ac:62:87:07:26:87:df:8e:56:19:4d:fd:
ae:07:ae:86:a0:77:d6:9f:37:46:16:a8:be:fe:f8:
6c:0d:2d:97:5b:94:c9:1a:2d:da:c5:4f:1f:8d:3d:
de:d5:43:70:e7:4a:2d:47:34:ee:62:8c:1e:6e:a9:
4e:7f:79:6c:84:6a:33:bf:9d:99:79:d9:1a:98:d7:
86:3b:95:a7:c4:f2:df:93:f9:3b:81:d0:27:5b:a3:
88:bd:cf:9e:8d:32:87:0b:4d:e7:41:05:83:02:96:
2e:9c:25:22:e5:4f:af:8d:c8:14:19:32:ef:58:06:
32:2d:ab:1e:c0:7c:93:d1:0b:0a:b9:77:c7:9b:6e:
90:36:42:98:50:a8:2a:5a:b4:58:74:74:9e:56:cb:
aa:c2:d0:d7:72:a1:d3:1f:63:68:b8:4d:8f:68:af:
12:0f:6f:24:46:84:3d:3b:76:ff:da:1e:6b:d1:2f:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9A:1C:3A:67:BC:AA:B3:95:DE:72:C4:96:E8:18:FA:01:63:3B:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
X509v3 Authority Key Identifier:
keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.187.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:42:58:9d:a3:16:e6:08:09:31:3a:33:ff:d4:8d:40:6f:75:
7b:7a:20:9f:a1:cc:01:36:25:c6:7a:f0:f4:d3:0d:f0:a6:b8:
ae:06:31:fb:ce:d5:aa:72:6e:c9:e5:e6:f2:dd:9c:26:a2:b7:
e3:d5:5a:2b:e1:0b:da:e9:61:a4:ac:7c:7e:f1:55:81:a0:6c:
f4:e7:92:56:e0:9d:68:31:59:56:06:eb:d2:63:fc:e1:0d:c4:
22:34:36:58:ae:a2:6c:07:ea:7c:e8:d4:6c:9f:22:3c:05:1c:
b6:07:2d:99:c7:50:be:ab:d4:4c:29:77:a6:79:56:39:6c:8c:
2c:92:82:e9:6c:4e:55:3b:02:5b:a5:e6:1b:ff:6c:70:21:e4:
81:74:05:ab:11:74:a9:0b:c2:05:8d:98:08:aa:4b:2f:8d:73:
9f:3d:f6:8f:c5:44:f6:ab:38:ae:7b:0c:d1:4c:68:65:69:34:
d2:45:b0:5c:e0:19:13:99:10:d3:2c:97:57:95:ee:2d:7d:f8:
ca:ee:45:c3:9f:75:4c:74:ff:0c:28:d3:e3:e4:ec:98:42:0c:
df:3f:cf:24:17:c1:5d:c5:4b:72:43:4f:62:57:f8:80:dc:c8:
24:91:0b:16:89:e1:c8:fb:ac:c2:de:fc:74:33:ff:3c:45:50:
79:8d:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:22 2025 by rpki-client