Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/8168b368-620e-38d3-8bcc-8fce21790e7d.roa
File: 8168b368-620e-38d3-8bcc-8fce21790e7d.roa (raw, json)
Hash identifier: JrOm05DmhXzmn3ayizz7qYGHN8GWtxHBlY6BFehSF5o=
Subject key identifier: 09:1E:40:68:51:15:61:43:98:E9:61:E5:69:20:DC:98:6B:D0:FD:46
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858488815DF5B31CE72535983EF40
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/8168b368-620e-38d3-8bcc-8fce21790e7d.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 2559
IP address blocks: 198.241.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:df:5b:31:ce:72:53:59:83:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=d0d26a12-37dd-4718-872e-828281d280ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:b4:fc:e3:3c:79:f3:56:e2:52:81:3e:27:
eb:68:75:46:80:09:9a:1f:7e:05:4b:67:fe:e0:75:
02:71:cc:ee:e2:81:ac:ac:ee:08:01:6c:90:44:cb:
04:b4:15:f5:cc:25:c6:a5:03:21:0e:be:97:0d:be:
be:b1:b8:f5:7f:3c:4f:05:46:41:56:71:8d:f1:d0:
5b:a8:79:84:88:e2:d0:d0:c8:b7:2f:64:79:b0:10:
fa:24:4c:f8:01:67:90:e3:54:c3:0f:fb:1c:ac:73:
87:71:2a:1c:87:9f:72:47:e4:f4:11:9e:fe:41:d8:
39:b8:06:2d:73:6f:10:f5:6b:6c:d9:3f:60:ca:ea:
70:bc:c7:f6:bd:4e:83:17:bc:02:5e:74:76:ed:f2:
32:91:53:b4:ba:a0:13:b2:a3:53:11:2a:d0:0b:da:
f6:09:57:27:ea:4c:7e:67:06:8c:fb:6a:7d:30:ed:
60:42:c3:2c:37:cb:6d:33:38:40:40:a7:89:ee:48:
af:73:27:b5:6f:b7:45:56:b3:33:a4:e9:8e:62:6a:
81:f3:e5:f8:24:28:ef:0e:2e:9b:de:a6:91:eb:f5:
22:02:3c:45:41:c1:32:07:9f:fb:80:7c:78:69:a5:
8a:61:92:7c:9b:57:e3:7c:95:0c:b5:07:04:30:01:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1E:40:68:51:15:61:43:98:E9:61:E5:69:20:DC:98:6B:D0:FD:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/8168b368-620e-38d3-8bcc-8fce21790e7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:26:92:34:02:48:7d:77:71:b7:4a:7e:8c:35:ea:cb:79:f0:
b2:d7:7c:ff:5e:81:f4:40:b7:48:5d:eb:63:2e:05:c9:0d:9f:
fe:b1:32:cc:96:2e:14:84:91:6a:d8:e7:56:b2:de:fe:83:f3:
f3:43:10:b9:8b:d3:50:72:ad:d2:a2:24:0e:e7:da:26:b0:6f:
a0:5f:71:63:9a:6c:e7:85:55:b5:ee:70:6f:13:42:f2:30:97:
91:90:9f:0e:a6:91:6b:50:4d:f5:5c:32:69:b0:b2:a0:b3:00:
21:48:c9:cd:89:00:f2:45:af:89:62:c0:35:c5:53:9b:88:d9:
ce:5d:f6:c2:af:5d:35:c7:31:f3:7e:38:bd:84:74:34:7a:bc:
6d:cf:54:f1:3b:c6:da:59:50:5a:7b:32:a4:10:3e:6c:6d:82:
9d:ef:fc:98:29:cb:c5:ed:72:83:48:c1:37:9e:a0:c6:72:b5:
ec:73:2d:94:f7:f2:02:95:ef:30:14:f5:bf:43:3f:2f:3d:a9:
2d:d4:4f:0d:9d:d7:fc:a9:b5:98:63:9d:1d:45:33:ec:65:48:
50:b8:72:80:b2:e5:29:1d:43:29:a6:ed:57:58:ed:ee:10:ed:
43:66:a3:73:d9:52:2f:25:df:e4:92:0d:17:f7:30:31:e2:ec:
22:97:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:30 2025 by rpki-client