Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa
File: 7b990af5-7866-397a-9d61-3f08feb8f6c3.roa (raw, json)
Hash identifier: 8Zkls/GS5f/pEJdNI/x/QeexU+KaGl88ivaV2FhwHfg=
Subject key identifier: 74:A1:0A:E0:29:02:5E:7F:DB:63:95:E8:57:BE:B7:34:85:69:03:EA
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F43285848DD3BAA23543CAFA7D34E8940
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 2559
IP address blocks: 198.241.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:aa:23:54:3c:af:a7:d3:4e:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=2dbf0923-9ec0-4763-ab3d-d076f39a5617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:be:29:41:ee:21:be:09:87:a9:83:3e:97:
d4:47:2e:97:fc:80:ca:7f:ac:bd:82:7d:44:10:f9:
f4:fd:64:dd:f0:ff:ea:ed:eb:fd:4a:d5:fa:5d:f4:
e4:da:75:be:40:a3:34:91:e9:87:7f:9b:3d:c7:9d:
ae:50:17:8c:2d:85:fd:54:b4:da:5f:7b:94:58:16:
79:e3:ba:12:d8:55:55:a0:a7:a4:15:19:45:1a:40:
aa:16:24:45:63:55:af:f4:3e:c9:2a:2b:71:bd:35:
56:c1:fb:70:2f:9e:7b:49:fe:fb:06:56:23:b5:88:
66:9d:6b:65:1d:b3:ad:1a:ce:31:d7:83:01:75:3a:
73:31:d9:44:f4:c1:87:70:9d:2d:b9:aa:41:c7:2a:
28:1d:b1:da:49:9d:a5:52:2d:70:61:91:6f:16:0e:
61:4a:e0:c7:6a:0a:bb:25:9f:ba:ed:1c:59:d4:09:
28:66:1b:97:25:43:b7:48:82:92:46:46:92:f0:da:
bd:15:7f:48:1a:95:4f:d7:b1:a0:9b:20:eb:12:e0:
8b:e0:a2:b4:b8:49:63:10:30:0e:1a:41:d6:86:1e:
72:0d:b5:a0:9f:61:dd:f6:52:93:48:0f:99:b8:5e:
09:04:b2:c7:02:73:3c:e1:f0:6e:26:98:85:2e:65:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A1:0A:E0:29:02:5E:7F:DB:63:95:E8:57:BE:B7:34:85:69:03:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:ec:ae:12:86:85:01:b7:b3:63:d8:1c:63:cd:0b:c8:03:be:
21:f1:ce:81:21:2f:ec:2b:b1:50:0b:61:ee:18:12:cc:47:e1:
7c:2f:b7:51:e2:c8:9d:93:f9:08:96:9e:84:4f:3f:81:6f:7d:
11:b2:12:14:b0:f3:d6:47:72:1e:6f:c3:1a:df:5f:0f:65:5c:
90:a5:a0:e9:24:d5:35:30:d4:91:9c:e4:cb:14:e2:cf:67:24:
e2:8e:bc:ac:29:03:42:54:a5:37:7d:39:88:2c:36:49:f5:53:
61:3f:8e:4e:fe:33:09:40:8f:5f:1e:5c:f3:79:ab:f2:6e:96:
0a:02:fd:02:01:a1:77:e8:00:12:1e:ad:7b:88:40:64:68:3d:
9f:ab:5d:85:e4:41:e5:59:90:b5:ed:51:74:5d:22:99:1a:35:
d0:5d:40:6b:f0:1f:9d:79:1e:f8:db:39:45:80:c1:19:f4:46:
73:e2:86:6d:54:9f:45:7b:af:20:7e:e0:76:03:c8:4e:33:29:
24:42:bf:f6:4c:fe:13:29:b5:bb:51:3d:1c:bd:d3:a3:45:24:
91:31:4e:51:6b:19:68:f3:a5:dc:00:bd:75:e0:f7:29:3f:08:
ad:94:e7:51:74:e8:4c:6a:17:32:58:ad:fa:1f:6f:b1:8a:d3:
17:ab:58:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:36 2025 by rpki-client