Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa
File: 538eaa57-d298-3f25-8222-de9e3819f175.roa (raw, json)
Hash identifier: qgEf1yWZQPUPNVHMEGgIU8x7GdnePIbdnkw6roFHsMc=
Subject key identifier: 9B:8F:A2:E7:7E:38:8C:7C:AD:47:D1:10:F3:E1:DD:D3:13:B1:FF:65
Certificate issuer: /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial: 010D0C9F432858486EF5B6EBDE2E766AD68E1660
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16796
IP address blocks: 198.169.129.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:b6:eb:de:2e:76:6a:d6:8e:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=e56445c8-626c-4caf-9576-990dece4a4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:f3:7a:af:48:5e:f6:08:5c:22:81:58:9b:
9d:b5:0b:9d:cf:ae:57:ab:3f:2c:c4:73:b1:dc:ef:
d9:7e:82:54:fa:0c:d3:6e:05:9f:5d:74:db:09:88:
ba:8f:ae:7d:6d:a4:7b:fd:da:c4:89:07:5c:41:70:
64:2f:f1:18:47:a6:53:ff:4d:4c:f2:ce:57:a3:14:
d5:ea:52:d5:8f:cd:41:69:a5:23:02:f0:c7:83:12:
25:59:6b:82:06:8f:43:a9:61:6a:e0:43:83:79:30:
06:a0:41:8a:51:7c:43:a6:9d:65:5a:fa:76:81:fa:
1d:43:f7:aa:ec:d4:c1:a5:f0:e8:c5:4e:11:a6:eb:
9b:65:b6:ee:95:b1:63:35:b0:9c:45:01:0b:9e:3d:
2b:64:08:de:80:01:8f:2f:31:ec:2c:bb:9f:9f:6a:
f9:31:09:0c:96:13:2f:99:09:88:e8:de:b6:83:88:
db:d0:77:3b:c4:0f:d2:ae:8d:8f:0b:fd:f1:28:20:
61:37:82:89:51:47:9a:cf:26:b5:59:aa:33:47:76:
af:d8:78:d3:08:13:81:f6:30:ce:89:d6:c6:f0:8e:
f1:b1:87:2d:0f:a7:e1:09:0f:37:cd:88:c7:57:1f:
e6:9b:3f:74:24:a8:b4:6f:3f:60:26:bd:0e:dc:d1:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:A2:E7:7E:38:8C:7C:AD:47:D1:10:F3:E1:DD:D3:13:B1:FF:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
X509v3 Authority Key Identifier:
keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
sbgp-ipAddrBlock: critical
IPv4:
198.169.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:92:7e:5f:b5:57:9a:f4:87:0a:5c:90:ad:1d:bb:ec:77:c5:
0a:30:c6:14:f0:c8:6a:a5:07:cc:ec:b0:cc:b5:b2:24:2c:5c:
f6:39:e0:25:7c:a6:29:9d:7b:97:17:74:b1:53:6c:d4:60:75:
db:fe:04:7d:df:9d:bd:ce:00:58:bb:e1:56:63:b6:07:64:3e:
f5:65:f2:97:1e:53:5a:58:5c:1d:4b:46:a8:25:c5:65:b1:18:
ae:9b:0a:cd:81:f2:7d:96:7d:2b:88:db:19:ac:22:55:39:73:
28:e1:94:e0:7f:83:7d:81:1d:ff:6c:36:7f:45:6f:73:5c:53:
76:ed:28:55:cf:a6:32:c3:ac:73:b3:a9:fb:14:0a:ff:16:3d:
4d:6a:30:07:68:e3:75:14:a9:41:25:f2:58:36:51:86:1b:31:
5c:e2:5e:c7:b1:97:15:0b:ee:60:d2:18:0a:09:1b:96:27:29:
e7:59:1c:ea:ba:2b:44:4a:2a:96:f0:66:80:2e:03:a3:e9:64:
3d:15:a9:b2:39:ce:1c:db:b2:41:15:a5:2d:73:60:4d:21:c1:
56:f6:c9:b5:b1:42:6d:26:59:2e:28:09:f3:a8:c4:11:11:fa:
da:70:c1:a3:a7:34:cf:38:d0:5b:16:c2:0d:56:38:d2:2c:8b:
14:6a:02:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:41:21 2025 by rpki-client