Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa
File: c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa (raw, json)
Hash identifier: eH2XoksZ7tiSXQ2s+R/qdMp36MI49g6lUoBAyZ11XB4=
Subject key identifier: 57:9B:49:58:8F:C2:DA:B4:40:52:E9:7C:E5:CD:13:28:C3:09:A2:93
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581FB28052575D30D655F40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:fb:28:05:25:75:d3:0d:65:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ff361f3e-7bfa-4b34-b130-93ca8a47306c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:80:0d:17:46:21:59:9c:52:9f:e8:5b:dd:
bd:d3:94:86:24:1f:10:4f:fc:0d:6b:d8:6c:6f:b1:
00:c4:2f:a6:4c:26:aa:82:80:11:28:e1:64:b8:57:
ad:25:e9:1d:c6:18:c2:5a:1b:41:d2:04:e5:0c:d1:
bd:75:8e:3e:d3:f7:b8:60:21:15:62:3d:3b:34:92:
a0:a0:d4:b7:18:65:50:4b:33:c4:2c:c3:76:52:7e:
e1:4c:3d:b7:11:8b:15:4b:b1:87:01:57:8b:11:0f:
3b:80:c6:09:90:49:58:ea:1e:7c:47:53:18:78:8d:
9e:8e:a8:c4:00:ea:a5:6e:89:6f:35:b4:d4:d1:b9:
ef:32:19:bb:d0:9e:a2:94:b0:f1:f4:19:d3:e3:47:
bd:32:f3:e9:0e:b9:3a:f6:bf:f7:54:20:8e:f5:57:
53:18:67:01:f5:71:36:b1:b7:0c:a3:97:05:83:99:
9e:3d:59:06:3a:18:ef:9e:db:b9:9b:de:0f:de:83:
5d:87:8c:11:eb:a2:9a:64:7a:ef:9c:da:e0:77:c3:
66:4d:66:ca:07:10:b2:aa:f4:38:6b:1c:33:5f:6e:
7c:f4:ae:eb:84:61:ad:b1:58:5d:35:af:66:84:7d:
e2:e2:91:c4:0b:e0:87:5b:13:22:fa:00:3c:f0:59:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9B:49:58:8F:C2:DA:B4:40:52:E9:7C:E5:CD:13:28:C3:09:A2:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:61:29:80:57:de:89:92:cc:26:1f:be:4f:84:01:a5:8b:ba:
ca:3d:70:8d:c4:ee:18:2d:be:15:78:ef:5d:41:ba:7e:9c:9e:
c7:66:1d:75:f7:06:62:17:76:60:85:d1:cd:83:f5:7a:e2:41:
63:f3:b7:19:bf:06:b5:45:9e:dc:a0:11:32:a3:b5:a7:c9:ae:
9b:60:48:ad:a9:97:3e:d9:13:4c:d8:29:38:62:df:13:46:fc:
cf:5d:e7:ea:04:f5:08:d4:65:2c:c3:e8:d8:95:00:47:b3:3e:
0b:60:cb:dd:05:29:47:33:39:94:0e:eb:ad:5e:3c:2e:52:60:
a2:8e:d7:fb:fb:9a:d4:23:0a:bb:d5:cb:4e:ec:c6:34:a1:d9:
19:ba:5f:8c:a3:c1:c9:30:62:06:9b:51:6a:f4:82:33:ed:3b:
07:7e:98:3b:59:fc:57:0d:37:f0:00:f3:74:2d:4e:4f:c7:d6:
d0:8a:ec:9d:c9:2b:80:7b:c6:cf:ad:5b:d9:a5:34:2f:fd:0d:
a9:4c:13:5c:cb:fd:7c:72:44:03:cb:3d:6e:f4:f2:06:76:df:
1a:08:ba:f4:11:e2:2c:84:59:82:70:0e:de:7c:8e:3b:fb:5b:
24:5e:74:c9:d1:61:af:b4:9a:6e:70:67:da:f8:3f:95:78:f2:
03:c1:67:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:24 2025 by rpki-client