Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa
File: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (raw, json)
Hash identifier: d4w0t9og2XvW00PexDGkJQXn60Llzk9KSQh1siPlgHw=
Subject key identifier: F0:58:31:19:A1:F3:3E:46:24:0B:A4:08:2C:53:41:9B:37:77:9C:E5
Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd
Certificate serial: 010D0C9F43285849350E9A088DF2DDB4EEC3DE00
Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 8987
IP address blocks: 198.38.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:9a:08:8d:f2:dd:b4:ee:c3:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=ae6dea00-eb1d-4c1b-b41f-f5b35a274c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:4d:59:6a:4e:96:d7:b9:34:43:62:0e:04:
95:f7:99:23:0d:95:a1:9f:13:e4:8e:b3:e7:8e:c0:
3b:7f:73:34:21:1b:34:0f:ff:11:8a:aa:04:f0:0d:
e1:c9:80:dc:f4:47:ed:23:a6:d8:b4:02:1c:92:5c:
ec:2e:ca:c6:44:ed:81:9e:f9:19:47:3d:08:66:f6:
7d:9b:bb:58:27:73:f1:ec:3c:b6:0a:ed:ad:d4:0e:
78:bd:d8:65:bd:de:8b:59:93:d9:be:51:0e:68:68:
aa:d8:97:d0:d4:32:0c:4d:a6:b0:1f:e9:29:bf:88:
a4:46:aa:5b:2d:a4:d2:9c:58:16:04:f3:fb:16:b9:
b6:8a:69:d2:b1:67:41:e0:b6:61:ca:bc:5d:7b:ad:
a8:e3:00:bd:1f:0f:f3:07:81:6f:b8:2a:d2:02:6b:
7d:5b:93:ab:18:06:6d:01:c5:c7:1a:e6:8e:b4:c5:
96:e4:a9:ab:fb:51:00:16:9c:84:ff:33:73:ab:c7:
f6:12:7d:0f:51:6d:df:55:a1:be:fc:2d:6e:61:45:
f4:c6:94:51:90:2d:c3:90:19:2a:bf:0d:e2:50:83:
2d:c7:99:02:46:62:14:7e:f1:1e:7b:db:c1:19:33:
d3:f5:83:bc:71:f1:06:ff:8b:fd:b0:94:af:18:d2:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:58:31:19:A1:F3:3E:46:24:0B:A4:08:2C:53:41:9B:37:77:9C:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl
X509v3 Authority Key Identifier:
keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer
sbgp-ipAddrBlock: critical
IPv4:
198.38.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:1e:da:75:4c:90:9c:ff:8e:72:8f:b7:e2:18:6f:03:95:10:
38:38:ac:02:76:70:e3:dd:37:d7:5d:b6:12:f9:05:d1:8a:22:
83:b3:93:d8:dd:96:0c:37:f5:8c:9e:74:50:0c:93:3d:48:26:
93:e1:c9:eb:cd:d5:4b:d8:80:a1:a0:d6:08:db:5a:12:7e:1c:
ae:b6:5a:8b:44:09:bb:e8:34:4a:ff:ab:cd:47:5f:c0:b2:6e:
5c:8d:e4:bb:97:38:e5:60:ed:29:eb:c1:fb:c2:75:ff:f6:f8:
66:d9:8f:24:56:ff:df:b1:6f:28:db:06:51:89:ac:7b:2c:48:
46:43:eb:9a:4f:24:05:13:2d:60:be:8e:18:4b:b1:75:7c:40:
f9:cb:86:3d:7c:ae:95:ed:f7:8d:36:f8:fc:a4:37:63:5a:24:
4b:d3:47:f7:3a:64:e4:37:a0:7d:42:92:da:26:a5:a2:14:eb:
d5:11:45:e9:1c:9b:1b:2e:e5:7c:74:50:93:61:44:83:0a:55:
7e:e2:2b:c1:b7:66:d6:d0:a7:dd:f9:c7:79:59:a0:23:32:f5:
6e:4a:69:95:a5:93:43:56:d7:66:2b:08:80:dc:6f:5a:af:d0:
ce:53:8d:b5:a6:94:86:49:11:b3:9d:87:f4:68:c1:f0:84:e9:
ce:3d:4f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:07 2025 by rpki-client on console.sobornost.net