Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa
File: 2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa (raw, json)
Hash identifier: uq6bh3a+Kqw15XeonS6AGE6pcTtVVuye5DkwXwptQtM=
Subject key identifier: A7:73:EE:9F:79:15:10:BF:9C:72:80:F6:D5:55:62:B3:3F:E8:04:00
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F43285848BE862C3FD9669381785994E0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 262287
IP address blocks: 198.145.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2c:3f:d9:66:93:81:78:59:94:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=6aed342b-a909-4fd6-bbd3-f57e9b13cddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:b9:43:34:4e:bf:c2:a1:8c:b6:af:fe:3e:
e0:83:6f:72:eb:e4:05:48:ef:c0:13:d2:40:9f:20:
0f:ae:99:12:cd:af:54:37:5b:a4:f5:06:bd:8f:80:
e0:d5:8e:ad:21:0c:af:c2:5e:50:2b:a0:c4:b4:4e:
c2:cc:09:29:04:1a:c6:df:cb:df:7f:c4:d6:5c:bd:
58:5d:96:a6:ab:24:33:f4:fb:0f:94:c8:f0:3e:6e:
0c:dc:10:70:52:66:a0:72:af:44:8b:66:ce:4b:ad:
58:13:19:48:21:28:1a:35:97:fb:d4:72:fa:03:a7:
85:65:89:c4:53:c6:c1:d1:be:22:9d:d0:ee:01:35:
da:78:70:05:1e:4e:2e:c5:99:5e:e3:19:90:b4:3c:
b5:8e:cb:8e:5a:66:37:43:6e:c9:55:46:fb:91:07:
c2:08:b6:0f:f5:5f:cc:2e:a1:7a:33:0e:a4:cb:1b:
97:aa:a9:11:2a:9a:d4:d7:29:51:8d:1f:73:c1:30:
9d:44:30:6b:b8:e0:15:7d:f3:f2:b1:f5:0b:79:5d:
b6:e3:9b:7b:1d:81:bc:fc:ad:f1:3d:23:81:b5:84:
0f:f8:e6:25:60:0e:f6:ac:f7:d5:11:9d:60:16:24:
e5:0a:0b:34:1b:8a:36:12:1c:41:eb:49:34:e7:31:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:73:EE:9F:79:15:10:BF:9C:72:80:F6:D5:55:62:B3:3F:E8:04:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:90:61:df:2c:be:0c:7b:d9:bb:84:01:7c:ec:a5:69:82:74:
27:9c:f3:2c:5d:1f:0c:5e:1a:6a:f5:87:dc:cc:89:68:bf:e8:
d0:ec:1e:d7:b6:6a:28:6c:4f:43:c5:d4:f2:d9:08:40:d1:61:
55:58:02:c6:ef:50:22:01:a3:3c:81:80:1b:7f:b2:f2:4e:81:
bb:d4:26:9f:5b:f7:6d:d6:b1:b4:15:27:d9:df:80:aa:58:b2:
44:37:bc:c3:e0:6a:57:83:47:19:45:df:83:cd:41:36:cf:60:
0f:3f:aa:26:5f:3e:d7:4b:1e:36:64:5d:d6:58:e8:c1:92:f8:
29:f9:3e:0c:9b:83:d5:91:65:e8:8b:0c:8c:a7:30:8b:c5:da:
72:0f:98:46:a8:c2:51:e0:d0:46:30:9f:ac:40:fd:74:a3:61:
f6:81:bd:f1:d6:07:4e:d1:99:da:cd:74:34:7f:df:93:56:ba:
1a:8f:b3:71:6c:c0:b8:c5:50:c6:df:49:32:91:f9:08:2e:b2:
45:dc:4c:23:88:16:74:a8:ac:66:fb:17:0f:1b:18:ad:2a:c8:
87:ed:f5:83:87:26:b4:60:59:b1:b6:fd:d1:00:73:46:d2:98:
68:3c:38:a7:8b:a6:83:17:b6:f3:c5:51:ed:54:52:ad:60:2b:
fb:e0:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:50 2025 by rpki-client