Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa
File: aff81813-3cd1-36c9-97ca-eaec48ce378a.roa (raw, json)
Hash identifier: Ok2BANC3kQhZUltJhBW8JrSoFqWYaBxrPIwO9dAZMgY=
Subject key identifier: 93:D8:90:61:0B:E2:98:7C:EF:5C:CB:13:16:F3:73:62:21:4C:3D:C2
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F43285848504035A73089C6DDB64BB3F0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 36692
IP address blocks: 198.41.8.0/22 maxlen: 22
198.41.8.0/23 maxlen: 23
198.41.8.0/24 maxlen: 24
198.41.9.0/24 maxlen: 24
198.41.10.0/23 maxlen: 23
198.41.10.0/24 maxlen: 24
198.41.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:35:a7:30:89:c6:dd:b6:4b:b3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=4d1077a7-396d-4a9f-a3e6-ee7912e15faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c2:79:97:f0:dd:1a:35:dd:3a:98:d1:12:da:
2c:1a:e6:55:b4:02:83:b3:d6:72:a4:9a:da:89:3a:
e8:3c:85:f3:80:ae:75:8f:02:1e:7f:db:33:cd:97:
df:84:9c:c0:69:40:bc:ac:3a:68:79:61:fa:84:15:
d6:f1:2b:38:94:79:81:e0:fe:94:69:4b:ec:7b:23:
f5:31:69:21:85:53:86:75:b6:05:0b:ca:8c:cc:5b:
f9:c7:ee:e1:df:62:4d:c0:78:47:2d:6d:d4:1a:e7:
8a:9c:63:10:25:dc:b4:ed:39:0c:e4:93:11:99:7e:
8c:55:fd:fd:00:dc:4b:55:f7:0b:4a:68:ee:50:6d:
ac:33:f5:52:4e:8a:77:82:7e:ba:d5:40:16:0f:b7:
15:5d:ca:89:f5:e6:ac:b1:e3:c5:ef:dd:0a:a9:e1:
ea:ad:cd:a0:3d:89:c3:6f:d4:7a:a5:6a:c1:46:7f:
94:bc:4c:0f:bb:c3:1f:7a:2f:c0:45:e1:96:77:e9:
89:35:2d:28:f3:19:6e:58:88:a7:98:b0:32:fb:d1:
12:38:e1:41:0b:6e:f7:a8:ce:73:53:a9:31:c7:49:
24:20:ec:45:b5:5d:73:4e:aa:51:25:df:d7:d1:52:
37:01:28:fd:48:68:87:70:72:18:22:47:e2:c7:1c:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D8:90:61:0B:E2:98:7C:EF:5C:CB:13:16:F3:73:62:21:4C:3D:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:44:86:99:49:63:7f:c6:00:cd:16:be:45:8c:d9:26:47:03:
f5:fb:38:ca:31:5c:c2:73:40:45:04:6a:f3:ee:cd:87:78:71:
b9:8f:6e:a4:5a:d4:e9:61:45:d3:7b:2d:7a:f0:9d:1c:53:ef:
0e:a1:c3:1b:5f:30:38:8e:00:50:18:3e:ee:8e:85:df:07:6f:
2d:be:08:a6:32:5b:60:25:32:70:d3:cc:61:c3:48:e0:f8:f2:
91:07:96:03:ab:88:d3:b6:1f:6b:c1:c4:7c:cf:f1:a0:dc:7d:
06:c7:87:be:b7:c4:07:4a:31:86:51:2a:e6:4c:b4:22:ca:58:
49:36:07:3a:8c:15:2f:de:04:26:1f:d7:7e:5c:12:bd:f2:ea:
0b:6e:26:bd:1f:c1:72:de:ab:b7:af:ab:f6:37:52:61:d6:08:
72:78:6e:5f:b7:3a:92:24:37:27:30:6d:16:2b:c9:bd:13:06:
ea:16:b3:fb:d6:e5:10:7f:47:62:4b:d2:48:ef:c7:a9:2b:cf:
e5:8c:3d:3d:c9:7e:51:c6:e9:b9:10:1d:95:c5:16:1e:7d:5a:
b3:d3:15:96:ff:34:10:dd:33:e4:ca:bb:4f:ee:c4:41:ab:d9:
8e:84:e6:18:e6:7c:71:e8:ba:50:e9:70:8d:31:33:69:d6:72:
f2:7b:0f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:13 2025 by rpki-client