Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa
File: c0540611-3f02-385f-ae3f-b838ce9aef5d.roa (raw, json)
Hash identifier: Uu883tgNGVsCnzDCz4QyG2/zBGxOwPkh8H1CVzgU5NU=
Subject key identifier: 11:FD:4E:57:4D:B9:23:F2:84:24:14:21:74:0E:8D:7E:6D:71:DB:EE
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E506A02634104A0FDBCED00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 198.187.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6a:02:63:41:04:a0:fd:bc:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=2b7bfb10-88ef-445f-848a-a8b572db5312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:9a:73:ab:2b:dc:04:03:3b:69:53:bf:5a:
b6:cb:2f:df:94:63:ef:73:da:30:62:6d:68:da:36:
62:3d:69:58:be:b9:12:1e:21:a8:09:6b:81:65:a0:
9c:43:91:51:0c:42:68:a6:49:ed:ce:ed:69:dd:29:
df:af:f2:57:e1:f9:92:07:62:79:1a:7a:71:70:c7:
34:b3:52:0a:20:e2:a7:6e:de:cc:f6:66:7d:07:53:
d2:fb:30:01:76:ee:33:43:47:35:f1:70:19:1d:35:
8f:1a:b6:b1:93:7c:6f:e9:08:f7:a8:cf:66:cd:63:
75:20:c9:63:05:bf:c0:ab:d9:7b:6e:8e:43:11:37:
b6:3d:99:39:19:ae:3b:16:2f:e2:91:e5:13:52:1b:
4c:2d:6c:bf:ec:09:ad:30:4c:8d:51:12:d9:ee:be:
b8:f2:b2:6f:4b:ab:1c:42:25:ef:b6:a1:78:b6:0d:
f9:bf:d5:df:ea:70:03:2d:33:d7:b5:ae:e9:b7:6d:
97:7a:ea:71:89:a5:f0:cf:5c:06:bb:90:4a:8d:77:
41:fd:0a:f6:73:59:c3:54:74:49:bd:d2:e5:12:7d:
e4:e7:d5:2a:59:7f:89:bf:32:e5:3b:4e:2f:b5:57:
89:a3:ed:70:00:7b:cb:88:c4:46:bf:db:98:d3:27:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:4E:57:4D:B9:23:F2:84:24:14:21:74:0E:8D:7E:6D:71:DB:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
198.187.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:3f:c1:10:e2:80:3b:f9:02:46:55:40:3b:a5:a0:a0:8b:bf:
d1:1b:13:02:6e:2d:7c:ef:df:9d:8f:ae:8a:b0:07:af:a1:f8:
d1:43:b4:d7:9f:da:b7:b1:c9:54:fd:c9:bf:79:cd:31:da:78:
59:64:e0:8e:1d:72:bf:2e:0d:c8:9d:f8:d7:4b:51:3d:4d:19:
a6:65:6e:4a:6f:92:15:86:60:be:cc:8e:16:d3:7b:1e:8d:d7:
1d:32:6f:dd:de:ce:e5:af:5f:98:8d:e7:9b:bc:f1:cb:01:bf:
f1:d7:39:24:13:2f:0f:ca:66:ff:b6:6c:6b:b2:9f:4b:3c:06:
88:10:7f:84:34:84:8f:b6:99:91:79:91:ce:e8:59:25:32:d8:
44:2f:df:f2:8d:62:07:1b:f1:30:00:73:3c:75:3a:df:71:9e:
af:8d:8b:bd:d3:e6:eb:dc:73:26:57:10:87:91:b6:43:19:2e:
37:37:e4:d3:ed:ab:eb:1d:4a:df:b6:25:85:b9:66:13:f1:8e:
4a:03:9a:a1:f6:62:65:6a:1b:41:c8:63:42:3e:dd:7f:3e:0c:
e5:bf:29:00:06:90:92:ce:92:a8:36:f3:6f:01:73:06:27:4e:
c0:ef:93:47:82:b7:b9:3d:6a:f5:6d:3a:87:ea:d9:a0:b7:6d:
37:ab:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:06 2025 by rpki-client