Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6827949-214f-351a-9256-4ac0e51afce2.roa
File: f6827949-214f-351a-9256-4ac0e51afce2.roa (raw, json)
Hash identifier: rY9K5cAIl3khniPlDh7W5o6XJM6Kmk6j4tOCtk+fkA0=
Subject key identifier: 2D:DE:A0:28:FF:FD:55:27:A2:C8:F8:E3:29:EF:44:82:BC:88:38:4C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581FAC6FD82AA9A4EF7E2C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6827949-214f-351a-9256-4ac0e51afce2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:fa:c6:fd:82:aa:9a:4e:f7:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2b9e7418-02c7-48a0-884e-d3fe35e99804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:0a:b5:3c:05:53:7c:75:dc:10:2e:87:88:
da:c7:de:3e:bd:d1:48:f3:27:63:b5:be:70:17:e8:
c4:94:91:72:0e:0c:c0:5b:30:94:c2:c5:ce:5a:56:
1a:ba:28:7f:16:09:36:51:ad:c5:b8:bd:f5:5b:cb:
42:06:d8:49:5d:22:e5:1a:0c:2a:74:9a:dc:f2:b4:
7f:09:bf:e4:94:16:f4:79:93:4c:9b:1c:c0:a9:08:
c8:48:e2:aa:9e:62:64:13:31:b0:7e:78:4d:23:d1:
91:b4:3a:0c:c7:8c:7c:a3:0a:32:2b:77:64:4a:29:
ad:8e:68:af:ec:58:67:34:d5:f2:d1:17:48:03:ca:
f7:23:08:04:73:c9:56:20:7c:3a:b6:61:0b:eb:c6:
66:87:0f:21:9f:c2:ba:09:85:fd:15:ed:20:df:eb:
b1:bb:3b:8a:f3:b4:00:a4:dc:16:ab:80:3a:fe:b4:
4c:5a:e7:f0:ba:44:53:c1:45:68:f1:e8:8d:f8:2b:
13:10:65:22:d2:8b:18:bb:ea:e6:b3:31:27:49:45:
bd:e8:42:58:ef:23:38:86:30:4f:f1:3f:5e:c0:b9:
fc:76:a8:21:7f:3a:5a:5c:dd:45:f9:e8:ef:03:c4:
cd:47:89:76:5e:52:20:34:a3:17:11:52:b4:32:d1:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:A0:28:FF:FD:55:27:A2:C8:F8:E3:29:EF:44:82:BC:88:38:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6827949-214f-351a-9256-4ac0e51afce2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:fa:84:d0:88:da:94:98:34:99:e8:1a:7b:74:e5:9e:21:c8:
f3:8a:8f:02:7b:de:aa:df:8a:f7:04:08:bd:02:1d:e7:50:bf:
59:6d:86:d8:96:d5:59:94:b1:b1:e2:32:42:58:c3:fb:dc:eb:
58:a7:aa:ee:93:4e:68:6e:94:27:a1:40:a8:2b:57:54:a8:f8:
61:fa:87:4d:05:ce:15:53:d2:c1:2b:ce:99:e5:36:2b:6b:dd:
47:a5:a2:07:57:31:4b:3e:07:52:40:cb:d3:1a:68:6a:1c:b4:
38:f1:42:dc:ad:53:d3:02:db:65:c4:89:92:de:1c:26:30:af:
cf:7b:50:3a:8a:fe:8e:2d:b6:48:4e:46:c5:55:47:25:26:f3:
08:f6:f2:f5:9c:fc:b6:e5:e2:53:33:16:c6:b0:18:cd:a9:81:
02:3a:2c:e1:a1:b6:cb:59:87:e2:24:7d:13:59:53:8e:d3:ee:
9e:f0:d8:ee:75:eb:8c:b9:d2:43:22:48:5f:3a:be:62:88:37:
4e:ed:fc:67:fb:f0:f5:1f:24:0f:d0:64:18:f2:64:85:dd:d0:
0e:a0:c9:f9:44:66:5a:c6:9e:be:74:67:70:14:6a:6f:fc:99:
f4:c4:f1:ac:46:e7:10:0b:e3:67:a0:f7:eb:cd:f8:c4:23:38:
af:6e:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:40 2025 by rpki-client