Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa
File: a998f21f-effb-392c-abf8-e55e5270da70.roa (raw, json)
Hash identifier: L4C5KRswBnJE0QA82nUAGrp0z0I47jKmrBSnMNBym20=
Subject key identifier: D6:C5:D9:4E:E7:CB:E8:04:EB:68:85:E1:E7:7D:C0:A9:10:91:5B:07
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FFCC748EA7D257DD344BC230
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa
Signing time: Tue 25 Feb 2025 11:09:58 +0000
ROA not before: Tue 25 Feb 2025 11:09:58 +0000
ROA not after: Mon 26 May 2025 10:09:58 +0000
asID: 30036
IP address blocks: 198.40.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:cc:74:8e:a7:d2:57:dd:34:4b:c2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 25 11:09:58 2025 GMT
Not After : May 26 10:09:58 2025 GMT
Subject: CN=ea5e763a-e483-4b59-b934-4a195e1cfb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:09:30:c7:30:cf:0b:78:b1:5f:e0:7e:c6:
18:40:40:4f:ac:d4:92:fa:6d:c6:b0:54:36:a6:a3:
71:2c:d4:ea:7e:f3:4a:3f:4f:ca:c2:1b:1d:62:ff:
c1:63:e4:92:26:84:fc:1d:d7:7e:0d:59:0c:02:39:
4d:ab:d2:67:95:8d:43:3f:72:de:b0:b5:6f:89:66:
18:c5:11:c7:fc:20:4b:15:20:1f:b4:93:5a:5d:f8:
60:40:31:9b:71:2f:dc:cc:a3:03:88:34:24:bd:8a:
04:36:27:68:ad:38:34:d7:c9:57:b5:8b:d2:0f:3d:
03:56:ce:f3:ae:41:18:ca:6a:39:0e:3f:a3:32:82:
09:4a:c8:4e:0f:73:6f:50:bd:13:e7:c5:36:cf:9f:
79:60:95:d1:ab:01:49:ef:66:53:ad:1b:a3:08:11:
e3:81:be:dd:27:7e:96:1c:5a:a3:1f:2c:bc:55:1a:
67:ba:cb:e0:2b:54:71:fb:39:9e:d0:2e:3d:a3:8f:
64:73:a8:69:42:43:d5:e0:a4:d2:90:ac:00:c3:8a:
65:6e:1e:e5:f1:b5:48:27:50:69:d3:d5:7a:c1:a9:
0e:8a:fc:e9:94:af:ee:41:8e:d6:1d:65:d9:fc:a7:
6e:02:ce:88:fe:64:e9:e8:4e:5d:d7:b7:93:f9:09:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C5:D9:4E:E7:CB:E8:04:EB:68:85:E1:E7:7D:C0:A9:10:91:5B:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
198.40.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:d2:4c:d0:0f:3f:dd:af:4e:38:83:79:81:0b:01:e6:ab:c0:
12:ce:fe:a2:47:5d:83:56:23:eb:71:f0:2e:c5:d8:fc:4a:80:
a4:c7:b2:a5:67:6b:b5:13:85:b4:88:68:d1:a4:97:16:65:b1:
00:3e:1e:4c:88:b1:45:f0:17:a1:5f:4e:6a:f7:03:be:04:8b:
aa:cc:0a:54:6a:63:6f:fb:cf:55:e2:c3:34:2a:00:71:29:7e:
1c:eb:be:a1:f5:4d:ba:03:ef:a8:9f:b1:3c:84:26:e4:21:2a:
97:d2:e1:fa:3f:7e:a3:9a:4a:45:6f:f5:8d:a1:b7:68:c9:f2:
fe:e7:b7:48:a7:81:c1:cb:26:74:c3:39:4a:8b:25:e7:01:0d:
ae:83:14:d1:25:8b:eb:46:45:3b:5c:44:42:a4:90:ef:99:ab:
e0:b4:f8:54:ff:54:2e:5c:0c:6d:bc:73:d9:36:8a:09:b2:1b:
00:39:c6:e3:89:ac:62:7b:4f:a7:e8:5c:53:d7:7b:73:d2:ef:
ee:84:a9:ee:6e:ad:3f:95:74:ce:f3:c7:50:fd:b5:53:84:95:
44:f4:5f:c1:d2:92:16:f7:2f:32:25:6e:4a:6f:71:07:a7:80:
98:77:f6:8a:27:1c:32:a6:42:42:ea:02:b9:31:ef:d0:c9:c5:
a9:f4:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:45 2025 by rpki-client