Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa
File: fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa (raw, json)
Hash identifier: BVHUC4bHN8eWzO8eWNLc4AlWljOTkeg2HUNCjIkIktQ=
Subject key identifier: B0:FC:FB:B2:2F:46:6C:64:7A:FF:13:30:71:29:14:17:FF:CE:AE:51
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5816A2C0743E08867ECD400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:6a:2c:07:43:e0:88:67:ec:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=bdc55246-5ac6-4a77-a893-3321c885aa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:14:93:bd:4f:45:76:15:fc:cf:fb:56:8a:
35:ee:a7:12:16:fb:61:a7:fa:47:57:51:49:d4:d8:
11:6b:97:7e:10:29:00:3d:2b:01:b8:b3:c3:8c:8a:
02:44:c2:9e:84:ff:61:87:04:97:7f:d3:c6:60:56:
11:b5:85:1b:b2:8f:c5:1b:c4:35:81:89:c8:e7:9c:
51:f3:63:54:cc:1d:1e:53:b8:d2:39:71:df:42:fd:
be:63:e8:4f:b5:27:f7:ee:ec:fd:fa:7c:7f:cd:bb:
da:8c:fd:a2:63:b4:61:b2:75:76:eb:6d:59:7b:87:
33:cc:22:dc:08:87:d6:b4:be:5a:4f:a2:eb:9e:d3:
6a:0c:c7:d4:1f:ce:c3:9b:77:d4:f2:1d:f4:0d:be:
e6:95:f5:f3:57:56:e7:3f:3f:2d:79:33:5b:c8:98:
d9:64:b2:e6:0f:8b:a0:7d:66:b9:32:c5:83:d1:56:
ce:b5:85:14:cd:09:b2:ea:4f:73:6a:45:ac:07:cf:
50:31:63:0f:c3:79:11:e4:d3:89:ca:13:b8:d4:3a:
8c:bd:58:17:8b:bd:17:3f:c2:f5:9c:33:11:db:21:
83:e6:80:02:ff:b7:06:95:93:11:e4:f6:4f:92:ed:
b4:86:5d:e6:01:70:3b:07:ae:ba:34:74:91:66:bf:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FC:FB:B2:2F:46:6C:64:7A:FF:13:30:71:29:14:17:FF:CE:AE:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:83:bc:0d:45:44:b0:b4:f1:bd:ce:17:9a:3b:bb:c0:a8:7b:
7e:69:d8:66:ed:9b:4d:64:45:7a:4c:40:f8:1e:3a:2c:33:15:
72:69:e5:83:8e:2b:6a:d3:50:99:43:da:d0:c1:84:db:2c:13:
03:d6:d0:ff:6f:db:c9:b6:a1:a1:4f:93:f0:10:da:e5:64:57:
f8:fc:c9:a3:57:83:f9:b3:12:4b:fd:29:48:35:74:78:4f:9c:
bd:83:87:b2:30:7a:d3:6c:1a:dd:43:29:0a:29:ae:30:01:07:
dc:93:17:87:26:06:1b:c6:9e:13:67:db:5d:ee:f0:dd:ca:2a:
a6:5a:96:9c:0b:c7:2c:42:30:ee:f9:aa:95:16:92:fc:74:d8:
be:47:f3:d7:6a:4d:91:f3:ad:aa:e3:ee:ea:43:51:72:b5:d3:
f0:7a:8e:ed:e1:41:88:9f:d8:fa:ba:f0:d4:e4:eb:f4:6e:23:
31:92:87:46:91:98:4a:2c:59:1b:31:c0:b5:da:31:7a:d4:02:
c8:e0:0d:be:fa:7e:8d:81:54:2f:6f:fb:1c:b0:73:b9:70:d4:
d3:7b:17:bd:c9:f6:c3:41:79:6f:bd:42:00:d0:f2:bb:31:c9:
56:94:dc:b5:80:e4:f3:77:bb:8d:cb:8d:0b:3d:d2:e2:93:89:
46:f1:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:20:49 2025 by rpki-client