Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72dea8d6-2fcc-3e9d-9a0c-f002b1c6bba0.roa
File: 72dea8d6-2fcc-3e9d-9a0c-f002b1c6bba0.roa (raw, json)
Hash identifier: I/cG9IeD/wQiGoXeOuWO+M52vd8dbTggYvGZi+48mzo=
Subject key identifier: 5F:24:91:7F:58:89:45:67:6D:41:C6:D6:08:31:3E:05:A9:AD:A8:3B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5816B418ADE4DE20D912420
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72dea8d6-2fcc-3e9d-9a0c-f002b1c6bba0.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:6b:41:8a:de:4d:e2:0d:91:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f542d461-81c7-48d5-bfaf-c7f273311193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:3d:4a:d8:ad:bd:6c:74:55:cb:5b:2f:e4:
e2:99:4e:85:39:ef:d6:ab:2c:30:81:45:ea:b4:fd:
bb:9f:d4:94:dc:d9:3c:dc:ae:93:00:61:da:f9:54:
04:d1:a6:7a:c5:60:d6:f2:c2:5d:c2:b7:a1:b2:f3:
df:44:df:22:a6:43:d4:1e:bc:40:85:e4:37:d6:13:
74:71:7d:4d:c7:53:ed:5a:17:8f:8a:fa:48:ed:99:
ce:1b:db:0c:1e:4d:0e:aa:c9:02:28:6d:0a:aa:08:
03:2d:87:40:40:27:27:84:5e:dc:05:9d:8b:59:c9:
fb:8d:aa:7c:7d:fc:0c:56:9c:fd:be:72:fe:a8:a1:
b7:94:4f:cf:b9:b9:48:56:eb:fa:5d:8b:37:2e:89:
44:1c:1c:b2:4a:b7:ef:38:0e:6e:48:dd:29:7e:84:
5d:68:8f:34:76:44:8f:51:76:84:87:fb:29:d0:72:
70:b8:9d:b3:cc:e5:cd:83:86:8d:f9:b8:80:db:79:
91:96:6e:6b:0e:16:0c:a0:00:24:d3:00:e0:8f:59:
9f:32:c8:f2:34:0a:ad:b4:75:ac:37:a5:8e:eb:1d:
75:68:87:35:c4:0b:b4:26:29:70:f8:fa:99:8d:de:
fa:ae:e6:1b:e4:b7:e4:53:4d:ae:41:2f:d8:1d:42:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:24:91:7F:58:89:45:67:6D:41:C6:D6:08:31:3E:05:A9:AD:A8:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72dea8d6-2fcc-3e9d-9a0c-f002b1c6bba0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:b7:0f:8a:8c:41:df:3c:61:a3:2d:32:37:5c:c7:5f:4a:5a:
e2:13:13:ec:e6:80:d8:38:a1:b9:a6:b0:2a:9f:9a:77:51:d3:
2e:bc:ee:bc:9e:a9:f7:49:37:f2:6b:32:c8:25:61:47:39:55:
fa:d7:d3:8e:01:60:20:69:15:33:42:b6:18:ff:c2:c0:24:e0:
95:44:f1:c6:d9:f0:78:ff:26:2b:66:ba:3d:46:b3:23:8d:b7:
9b:3b:34:96:33:ac:43:6e:73:4f:d4:5d:65:d2:85:63:21:fe:
ef:1e:7d:7c:e8:ea:55:3d:6d:44:06:20:f5:3e:db:9d:88:d7:
1c:06:08:a5:dc:e8:d5:58:a0:9b:7b:61:8d:2e:61:6b:29:19:
4d:e6:38:d9:0c:58:07:e2:56:1c:10:9a:95:c3:fc:19:29:63:
86:61:9a:6b:8d:a7:73:ae:fa:bf:e1:a3:49:e7:f0:0b:f4:26:
32:4a:9d:b4:d8:8b:e4:76:cc:b4:66:ea:36:a8:43:94:9e:ae:
e1:5f:5d:e4:45:eb:3c:ab:33:20:3a:ca:01:45:c7:52:d7:3b:
28:79:86:01:6b:9c:62:51:8e:39:38:7d:05:b0:d0:a0:bf:cd:
91:b6:22:40:1f:6d:7c:8d:c3:f7:8e:97:b8:cb:1c:49:96:bf:
d5:c1:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:16:03 2025 by rpki-client