Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/514d671d-96d4-336f-b049-ff3a85d9bd8f.roa
File: 514d671d-96d4-336f-b049-ff3a85d9bd8f.roa (raw, json)
Hash identifier: JJZaFL4T1/aQ7epFzo3cNK9HTN/OuwvlLccB7EYgyT4=
Subject key identifier: 21:55:CF:88:B0:DE:CE:8C:99:5B:7A:D8:8E:7D:CA:CC:A9:CC:76:43
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584981D44CFB2CE8A9EF22A6F180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/514d671d-96d4-336f-b049-ff3a85d9bd8f.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 5641
IP address blocks: 198.2.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:4c:fb:2c:e8:a9:ef:22:a6:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=33e1a85e-2040-4375-82c7-7abf1cfe554f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:c3:b8:1f:65:4e:0a:16:c7:85:28:e6:29:
ca:46:00:eb:f6:48:e5:27:d7:98:8c:4e:f8:d3:33:
75:72:c6:a4:2b:92:75:96:ed:bd:85:3d:0b:b7:fa:
6f:7a:7c:37:de:b4:00:9a:21:ee:5e:20:c6:d6:b3:
23:45:23:96:d0:4f:6b:72:f6:bb:c6:71:e3:bb:6a:
50:a2:c3:0b:e1:f8:48:f3:b4:82:ca:d4:f3:88:27:
b5:13:30:d0:ef:4c:db:82:bd:67:43:1c:33:08:c5:
2d:bf:7c:4e:f2:d0:0d:7a:42:8b:27:35:bf:ef:d6:
21:cc:ad:60:0c:a2:ad:77:aa:1b:af:51:ae:7f:8d:
a8:07:9d:09:a1:08:d5:c1:ba:7b:4a:a9:10:bf:97:
0a:11:78:bd:7b:4d:70:f4:a0:99:69:02:44:38:07:
90:d1:9c:63:1d:16:51:83:da:53:88:63:da:77:ba:
64:15:d5:4b:54:01:da:44:31:1a:e4:7a:8d:3d:14:
e2:d6:cb:45:56:43:ba:64:e8:98:f3:21:f8:c2:b1:
27:42:97:16:96:b9:61:89:95:dc:10:7a:7e:f6:7b:
ab:b1:88:fe:7c:96:b6:6c:26:01:df:2c:4f:e6:fe:
58:9a:7d:ad:f5:24:2f:10:a7:9a:b7:bd:20:9a:b8:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:CF:88:B0:DE:CE:8C:99:5B:7A:D8:8E:7D:CA:CC:A9:CC:76:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/514d671d-96d4-336f-b049-ff3a85d9bd8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.2.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:c1:b1:7c:39:18:b1:2b:3f:61:4a:11:32:74:98:16:b3:6b:
a4:95:3c:15:aa:27:8a:13:31:ff:e0:ac:24:9e:c6:f0:b6:b5:
73:80:50:10:34:4e:81:14:19:c4:7c:66:5d:57:38:b2:43:bc:
f0:c1:ce:b9:66:ce:e1:90:fc:e7:ef:d8:c2:06:97:ac:f1:ed:
58:bf:4d:2b:e8:22:16:56:d4:05:2c:fb:bf:55:6c:69:7f:33:
c1:1a:80:57:72:ff:a2:b2:48:f4:53:41:82:58:c9:ba:72:e7:
ac:66:e0:54:d4:ae:5f:3c:e3:80:2b:15:7c:f2:a1:97:17:67:
1b:54:ba:c4:ec:bc:e6:ba:db:b3:97:82:84:72:ce:bc:53:fb:
c3:d5:61:2b:c6:b3:2c:4f:49:ce:7e:ef:fb:7d:6b:36:83:26:
6b:11:fe:d3:3e:73:2b:27:35:03:8d:be:ab:6d:b3:64:a4:a1:
ad:f0:0a:44:90:62:8f:8a:b2:72:cb:20:64:d3:07:30:ac:17:
d5:26:53:20:79:63:cc:55:a0:1c:a1:44:45:eb:f3:6a:c7:d0:
7c:ec:f3:10:7b:bd:5e:0a:c8:12:76:f9:82:8e:59:bd:7f:7f:
a6:ca:37:cd:c6:cb:f7:17:10:39:ce:e6:b2:69:7c:a3:79:ea:
8b:c7:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:01 2025 by rpki-client on console.sobornost.net