Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/0a5ca750-91ca-39b7-80c6-75159f72f766.roa
File: 0a5ca750-91ca-39b7-80c6-75159f72f766.roa (raw, json)
Hash identifier: q2kIHigc+9hr9GuL+ulfDPPocUn12Pp11hByV4T16zY=
Subject key identifier: 90:95:4C:51:AB:19:68:F3:E4:B5:72:C4:76:C5:FA:EC:DC:58:65:D9
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858488815DF9CCA71685AE6B2E580
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/0a5ca750-91ca-39b7-80c6-75159f72f766.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 2559
IP address blocks: 198.241.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:df:9c:ca:71:68:5a:e6:b2:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=1542c561-b417-4c62-8737-9ea1c3824d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:af:49:b0:72:7c:11:0c:55:6a:0c:3c:34:
22:7f:11:00:fd:1c:45:57:d6:8c:1d:62:66:a5:af:
a4:31:30:83:ac:36:66:80:a6:85:3c:98:e7:a9:55:
14:0f:42:2a:16:31:bc:66:c7:03:9b:f3:f5:a8:f1:
ac:26:22:23:dc:b8:93:12:88:9f:a3:03:b3:92:d0:
1d:96:75:0c:0b:d4:df:9a:a6:aa:d4:90:a6:7e:87:
ee:10:92:50:1f:b8:52:48:08:c2:60:7d:2a:9e:c4:
2d:f5:03:2a:14:45:1d:a3:00:2d:ba:11:74:0c:ef:
31:25:0f:9e:c0:bd:91:58:40:06:d9:3b:7b:d3:ed:
f4:78:d3:d9:80:35:d4:ab:f0:1a:1f:1a:fd:89:45:
d4:ca:fd:c6:3a:fd:b8:3d:ba:1d:bb:bf:3d:2e:6d:
2c:01:84:1e:c6:56:1f:5d:8b:75:44:32:d8:df:1e:
d5:a9:ea:4c:b7:2a:bd:72:9e:ac:d7:31:00:60:97:
7f:97:18:09:1e:e6:0c:54:89:16:68:fb:37:c5:66:
8d:52:fe:b6:66:07:fd:ec:f8:f8:f9:7c:a4:ae:72:
cd:c0:be:7e:e9:16:d1:86:eb:ec:a2:17:5f:21:b5:
80:d4:0f:25:67:ab:85:f8:f6:4d:c0:e0:dd:11:41:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:95:4C:51:AB:19:68:F3:E4:B5:72:C4:76:C5:FA:EC:DC:58:65:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/0a5ca750-91ca-39b7-80c6-75159f72f766.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:e4:e6:fc:b9:10:ae:3f:31:06:10:cb:a5:a8:b2:7c:b8:cf:
5d:ea:97:90:59:3f:27:5a:99:4e:58:af:91:9a:3d:40:d9:d8:
4b:f2:29:19:68:6c:a6:fa:77:f0:33:60:c5:17:cb:35:a7:ad:
43:8b:75:96:bc:dd:81:0a:53:44:57:3a:37:8a:d8:c2:d1:bb:
c0:31:0b:ed:73:de:fe:74:c0:5a:83:45:8d:95:00:a9:97:9c:
4a:08:ef:d2:f8:73:fb:c0:ec:89:81:1b:b4:c8:58:7b:26:c7:
a0:6e:4b:c8:4f:e8:27:a0:38:7b:c3:c0:07:c5:fa:16:00:68:
83:cb:83:e2:89:d8:25:f3:ce:35:56:91:28:0b:01:10:a4:7b:
07:03:04:1d:14:b4:7f:37:72:ad:c7:82:d6:27:ee:f8:9f:57:
dd:b4:81:be:30:a0:92:7c:de:9a:6c:e2:e5:33:2f:3b:3c:df:
4b:b3:b7:e8:9f:27:eb:88:77:ff:7e:5e:47:4d:b4:05:4c:b4:
15:86:94:2d:f6:42:1e:a8:67:c1:05:75:a1:cb:79:15:a5:04:
f2:2b:06:72:e9:e2:1f:d1:ab:43:38:c6:85:f8:4a:19:09:0b:
f5:4b:08:f3:03:89:c6:c8:8e:a9:d1:e6:36:90:4d:0a:c2:a7:
5d:21:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:41 2025 by rpki-client