Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d47da869-8452-388b-af25-d64944ae1fc5.roa
File: d47da869-8452-388b-af25-d64944ae1fc5.roa (raw, json)
Hash identifier: xtlYeirBp5eJzIC1VwsaNxgNVBPybYCP3I0CAmki0nM=
Subject key identifier: AF:41:33:20:6E:D1:B4:07:2A:88:5D:9B:40:D4:65:4F:4D:E2:45:29
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581FAD2E806577B77794810
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d47da869-8452-388b-af25-d64944ae1fc5.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:fa:d2:e8:06:57:7b:77:79:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=470b05ab-7b5d-4a6a-9ac2-46b5cad9c9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:11:41:68:cc:98:0c:e0:9e:c9:31:ef:a3:
e5:b0:57:a6:0e:83:f3:49:b3:6d:19:cf:09:fc:b0:
df:ca:d4:7c:53:aa:88:cc:93:66:1c:a6:22:d3:d0:
87:3e:6b:8b:1b:4c:7a:50:76:4a:16:4f:3d:72:58:
87:b8:04:c7:01:7a:ce:e0:5c:c1:0f:65:c2:7a:8c:
2b:ff:39:99:a1:4a:c1:82:28:c6:67:4a:83:9e:cc:
8e:75:ee:ec:b2:0e:36:af:91:b2:88:8b:73:db:3f:
f7:32:77:46:0f:1b:50:97:c7:ec:b2:84:4b:cb:5d:
9c:d6:08:97:56:b4:69:11:7f:2c:08:31:8e:ba:ca:
a1:08:13:01:7f:85:c7:b8:9d:c0:2c:fc:d1:01:f5:
92:93:ab:1c:f3:f7:b4:82:d1:db:f6:39:a6:62:3e:
dc:74:c5:3a:46:e8:62:80:ba:85:d7:64:68:e7:46:
26:de:5f:78:93:7f:70:99:3d:40:87:7d:a8:80:af:
53:53:6f:9e:08:f9:51:3b:cf:6a:14:e5:67:37:02:
d1:44:6d:c5:ae:bc:d1:2f:e5:59:a1:0e:4e:c7:4c:
d3:49:cc:df:36:a0:20:a2:0e:ef:6e:92:f1:5e:9c:
6d:a1:34:4b:e1:ee:33:9e:8a:c0:56:a6:b4:fc:2a:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:33:20:6E:D1:B4:07:2A:88:5D:9B:40:D4:65:4F:4D:E2:45:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d47da869-8452-388b-af25-d64944ae1fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:0b:f9:a4:2c:14:a8:a9:f7:a9:88:bf:7f:f3:76:b2:1c:cc:
f9:1c:e4:15:8a:28:a8:64:7b:47:9b:e7:4f:21:66:fd:ff:1a:
8f:a4:17:55:fb:7d:e2:d0:41:18:94:7d:a2:6f:96:b0:b4:27:
a4:de:62:b9:24:2d:95:da:36:42:20:5f:b5:69:5f:34:56:dd:
a1:50:43:07:e8:35:4d:63:a0:c7:54:a5:46:d1:d4:8e:5c:fd:
8c:7d:05:9c:93:40:b4:96:59:73:19:4c:36:f0:2b:dd:29:2d:
52:ea:5d:07:ab:ea:5d:c9:36:da:e4:b9:fe:18:c8:a1:cc:b9:
4e:30:81:89:ce:28:66:89:89:9a:81:12:8b:a4:d0:fb:44:33:
a4:8c:64:14:10:c4:d9:66:df:57:ce:42:22:c0:6c:f5:e4:12:
fa:04:69:2e:70:75:da:b4:e9:28:e5:cd:ab:e8:5e:dd:e0:e7:
7e:ea:d5:48:e2:75:73:d2:c2:79:2f:d5:1f:77:6c:56:62:e1:
4a:c1:51:3d:09:aa:e6:bd:96:1e:31:d1:12:61:6e:e3:bc:ed:
5d:44:16:ee:9e:e9:42:f1:59:85:6f:7c:16:d1:97:5d:43:28:
8a:71:07:91:30:57:c6:4a:64:f5:60:90:b3:11:3e:6e:f7:25:
5f:14:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:26 2025 by rpki-client