Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/fb740150-582d-31c1-a150-5bceba0e8468.roa
File: fb740150-582d-31c1-a150-5bceba0e8468.roa (raw, json)
Hash identifier: pFu1w4y/nOBn29ShM+X0/brcz0DSUpqgEjmh2lGRGn0=
Subject key identifier: 77:4E:21:AB:B1:DE:1C:47:D3:CC:DD:88:C3:8E:64:95:B5:84:DF:EE
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F43285848504038439BFB5FCD436BE9A0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/fb740150-582d-31c1-a150-5bceba0e8468.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 25605
IP address blocks: 198.41.12.0/23 maxlen: 23
198.41.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:38:43:9b:fb:5f:cd:43:6b:e9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=958ae021-1186-4a7c-9630-d340acac5671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:e7:86:52:23:54:92:42:58:38:e0:c7:86:
2f:a6:4f:eb:89:05:cc:d7:a9:cf:69:73:16:57:e6:
37:fe:8b:c1:da:16:d4:b0:7c:14:39:31:df:85:88:
5a:bb:02:ef:b7:d6:ce:78:3b:87:df:cb:3c:aa:3e:
7e:c2:87:c3:32:43:f7:1e:f2:7a:4f:c6:64:2a:57:
a6:a7:76:52:29:9a:78:d9:0b:33:2b:95:ce:54:5e:
15:5b:84:1f:34:eb:71:1e:6a:b7:57:46:a3:18:f3:
fe:8f:50:08:37:6f:e0:19:dc:63:f6:d4:f6:aa:a8:
fc:3d:26:83:03:27:97:6c:9f:f2:ed:34:b7:7f:bd:
12:da:a8:6a:55:f4:00:35:bf:16:fa:46:2f:38:29:
c5:8f:f2:f4:fe:37:fa:e1:ca:dc:66:ea:ec:3f:b2:
e2:a4:81:ae:02:f7:80:ed:41:81:69:60:29:8b:d6:
5a:ab:9a:88:72:ab:b6:3a:9c:9d:f6:e3:ee:2b:b1:
cc:15:67:ae:f4:42:86:3f:c7:08:30:8c:2c:8c:20:
23:08:8e:ba:60:e1:e9:db:c9:1a:29:b9:78:33:01:
d3:d2:a0:85:31:e4:d6:89:99:28:e7:83:d9:ed:09:
3b:0c:ca:4a:63:fc:82:53:85:4d:07:51:35:f5:50:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4E:21:AB:B1:DE:1C:47:D3:CC:DD:88:C3:8E:64:95:B5:84:DF:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/fb740150-582d-31c1-a150-5bceba0e8468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:a1:bd:2c:64:c2:fb:5f:a7:70:28:47:60:16:ea:fd:47:2e:
3c:60:31:7a:dd:67:d1:2e:fd:8f:f9:d2:04:3e:98:5e:4e:3b:
5b:fa:bf:fa:21:9b:e9:b4:fe:4d:74:a4:2b:fd:34:e9:07:99:
98:87:89:23:36:12:d7:71:67:70:30:bf:19:60:0f:f7:fb:6e:
2d:94:28:cf:d8:cf:98:39:bf:88:81:90:6b:da:31:68:7e:8a:
ec:4f:9d:bb:49:ec:4e:5a:31:07:2f:1d:7d:40:44:84:0a:40:
c0:da:16:3e:8e:70:6d:c4:59:b0:cf:56:3d:12:3f:c8:3e:9e:
bb:1c:20:97:b4:70:46:88:70:23:00:3e:ca:20:3a:be:47:00:
4a:e7:29:bf:d0:74:f7:81:f6:bc:93:3b:4a:e9:7e:ce:6b:01:
51:32:a4:50:8b:7d:5c:94:0c:e3:be:00:24:82:ef:b2:f4:3d:
85:6a:69:a7:e4:75:6a:24:64:6b:fe:46:b6:08:17:36:0d:ed:
27:2e:89:79:36:95:c9:c7:c9:8b:26:4d:18:b0:cc:7b:a8:56:
d5:9e:7a:e9:30:62:ab:e1:f7:88:a8:99:92:9d:48:86:09:8f:
21:1b:c7:a2:a9:ef:6b:be:c3:05:d7:ad:f3:72:70:73:0d:71:
8d:3a:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:51:39 2025 by rpki-client