Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1d51e06d-83a9-34c4-82ba-ea41b1192441.roa
File: 1d51e06d-83a9-34c4-82ba-ea41b1192441.roa (raw, json)
Hash identifier: WrXYjGQUGlRBKqNbaeI1mbr0fGSOMXj/EK/0yIzrJic=
Subject key identifier: FA:FD:75:54:32:A9:64:DA:2E:DB:15:2E:F4:DC:5A:20:23:CA:D7:03
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858489BA0A7137C9873099808F9C0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1d51e06d-83a9-34c4-82ba-ea41b1192441.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 2559
IP address blocks: 198.241.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:a7:13:7c:98:73:09:98:08:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=a6687df9-b83e-4e6c-93a9-4dad076c4570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e6:3e:dc:48:07:37:eb:05:0d:59:4b:81:5b:
ce:23:cc:5b:48:25:1f:90:fc:a0:08:4a:77:86:63:
43:5f:f9:40:65:66:02:51:da:ea:4c:4b:cc:75:e6:
c5:3b:7b:fc:e1:ec:17:47:69:e4:85:27:b8:06:d1:
cb:52:6b:63:77:be:40:cd:f0:a6:46:02:58:29:75:
45:96:55:b6:56:7a:8e:a5:6c:32:33:b7:0a:7f:f7:
ee:66:25:61:62:e3:7b:bd:e2:12:bb:c6:e4:00:2d:
22:6b:2b:4e:d5:c8:75:55:94:2e:f4:c8:a6:c6:5c:
5a:50:ef:f9:22:d3:c5:5e:88:1c:7b:fd:cc:c2:29:
79:92:1d:71:f7:07:ed:17:67:85:4a:e8:6f:9c:b7:
8d:50:d5:f6:a3:8a:ab:45:6c:39:69:14:ae:9d:9d:
d9:26:b2:f1:49:e4:af:51:fe:e7:28:14:79:ae:19:
23:e7:ad:e7:d2:8a:cf:34:80:37:12:93:65:ea:3c:
ee:22:1e:b5:65:12:2e:0d:2e:96:fc:dd:49:df:e3:
6b:e1:f7:cf:e1:7d:67:25:57:71:79:f9:01:60:8f:
cc:b6:bd:e1:b7:bd:f6:0f:7c:0c:f2:d8:9d:0c:cc:
05:0a:5b:43:8f:fc:92:7a:91:01:8c:2b:9f:26:5d:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FD:75:54:32:A9:64:DA:2E:DB:15:2E:F4:DC:5A:20:23:CA:D7:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1d51e06d-83a9-34c4-82ba-ea41b1192441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:8c:de:62:d3:67:5d:a1:e5:65:15:ed:64:48:e8:e9:cd:e2:
87:11:d3:9a:a8:48:f5:4a:ce:0b:33:47:1f:e5:d6:c8:aa:b8:
98:bd:19:de:bb:15:2d:c9:00:60:7c:96:05:79:e6:ea:22:ed:
2a:9d:a7:03:00:ac:8f:53:ab:92:fa:54:63:01:b2:bd:99:c9:
31:28:68:23:96:f1:90:ef:b8:7e:d6:14:b2:76:9b:36:57:95:
ea:38:2b:2e:f7:60:07:26:a0:05:d9:cd:eb:54:ca:11:0d:8e:
7b:03:b9:60:98:ef:87:a0:17:e2:7e:d8:1d:71:3f:a1:72:44:
aa:7a:5f:62:96:d5:ac:36:f9:9a:6c:b6:6a:31:24:30:76:a7:
1f:d8:ae:bc:1f:c5:dc:ff:a2:41:24:96:98:b5:87:10:33:83:
4e:df:26:ce:f6:c6:06:8e:01:09:bf:50:91:5a:c4:98:02:86:
a5:dd:87:a9:56:fa:c8:ba:41:56:5b:33:e2:08:b7:08:72:83:
1f:3e:f6:07:6d:db:57:0a:c1:0e:60:bd:8e:b8:27:8c:e6:c3:
bc:72:9c:ca:f4:77:d6:16:b7:36:79:56:f3:48:71:83:21:75:
4a:22:ff:e5:d8:f9:eb:b0:e8:0c:0c:6e:c5:e2:fd:a6:a4:7a:
01:88:9d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:26 2025 by rpki-client