Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa
File: f0aee5d1-d44c-3566-b71f-05ca82efac32.roa (raw, json)
Hash identifier: XmvBTHc0ck7hhW01ltphyMqknEdr3D9lkb2mZiUVklg=
Subject key identifier: AC:68:D2:D7:DC:02:4E:92:C0:50:17:75:56:71:34:18:5F:5E:56:70
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328584850403864B0AC5D486E4BC540
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 30607
IP address blocks: 198.41.12.0/23 maxlen: 23
198.41.12.0/24 maxlen: 24
198.41.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:38:64:b0:ac:5d:48:6e:4b:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=2c1bd8c4-c727-4c82-a8f1-a6d7bc562dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:d2:32:99:25:0a:c5:74:1a:07:3a:45:ef:
99:9c:a2:4c:76:d7:91:db:39:e9:72:7e:05:44:96:
5a:3a:57:29:39:81:d2:16:f9:0f:82:af:fb:94:9d:
e6:07:e5:dc:4a:4f:62:a6:46:35:07:d3:24:1d:cc:
f2:1c:b4:52:a1:55:6e:d1:49:62:ae:6e:bf:98:70:
20:ce:68:f8:54:fe:1d:f2:5b:7f:6a:09:47:75:43:
1f:98:66:71:cc:05:47:e4:7b:84:5a:0c:65:53:c9:
e7:91:aa:df:ed:b8:68:2f:6e:14:6d:c1:56:d8:bb:
b2:3b:30:f0:78:8a:df:66:dd:a0:73:0a:d5:75:04:
54:80:18:c8:ab:d0:74:c3:1b:5f:40:09:5b:f4:02:
4a:cc:90:2b:cd:bd:97:28:a4:11:fc:87:6d:c1:c8:
42:02:bf:f4:56:bd:1c:1b:a0:5d:c3:23:87:47:ee:
88:76:f2:e4:f2:a0:a7:09:ed:3f:48:82:89:52:c4:
1f:4b:fb:41:7f:73:83:cf:b3:8e:88:94:a2:8a:87:
4e:5b:86:26:8c:0b:9e:f4:21:f8:e1:aa:ce:e7:ae:
41:0f:3d:74:2c:66:19:2c:15:1d:0b:62:9a:ef:ef:
2a:47:78:68:c0:b1:af:df:15:75:52:f5:04:3b:00:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:68:D2:D7:DC:02:4E:92:C0:50:17:75:56:71:34:18:5F:5E:56:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:49:0c:bd:26:09:95:8d:74:07:2b:1f:b0:f3:16:a1:ab:89:
2d:5c:61:6b:03:51:7c:a0:78:7e:a5:57:0b:03:7c:ee:9c:66:
b9:c9:76:39:c7:2c:06:31:a2:7c:aa:de:e8:b3:6e:2a:5e:a5:
f1:97:92:5d:50:01:e7:1a:71:29:a7:d6:7c:2e:65:2c:b9:21:
80:0f:a3:74:c7:b2:7d:f1:69:d6:3e:13:76:63:bf:41:c6:be:
9b:8b:b6:c5:d8:7a:bb:1a:ae:ad:ce:80:81:c9:75:c6:af:9e:
75:dc:d6:87:7e:e0:77:63:41:8a:ec:8d:e0:0e:9d:b0:39:1d:
f5:38:0c:f9:5c:9b:8e:e1:d3:eb:01:68:e2:ca:21:f5:b9:97:
5b:e9:bc:77:73:ce:17:f9:a5:83:32:3f:46:86:04:55:81:56:
41:9a:d8:3b:8f:4b:aa:cc:0a:d6:06:6e:dc:1b:4d:e4:b0:03:
9e:f5:5f:f6:35:d3:fb:d9:3d:5d:fc:75:5e:55:a5:e4:89:cb:
24:36:be:99:91:7d:48:34:12:48:4c:59:2a:06:1d:28:cb:86:
26:00:01:62:1b:30:5c:4e:8d:ec:53:3e:52:36:69:f0:0d:c6:
5d:5a:bf:c0:64:7f:4d:80:de:e3:29:28:78:bf:36:7a:ba:61:
93:05:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:47:21 2025 by rpki-client