Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f3d02ee-032e-364e-ac5e-b4bf963d99cd.roa
File: 9f3d02ee-032e-364e-ac5e-b4bf963d99cd.roa (raw, json)
Hash identifier: co5HTtO+rc1i/TfnFwlGTXTCQJWFzwgPdYi1dQnqjRE=
Subject key identifier: E1:56:21:AA:D1:35:F1:BE:1B:82:D9:30:E8:5B:BA:0D:63:3C:FF:0B
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F43285848FD56CFC71C08FE4F6752F300
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f3d02ee-032e-364e-ac5e-b4bf963d99cd.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 2559
IP address blocks: 198.241.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:cf:c7:1c:08:fe:4f:67:52:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=c3b16804-0c20-4c6f-a74b-e2806eb13e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:3d:32:f9:8b:2d:70:bc:7f:4d:c0:75:85:
59:f3:f9:66:60:05:89:99:11:02:8f:74:58:cf:87:
f7:44:bd:2e:39:0a:65:df:76:7f:76:e4:b4:8a:f9:
10:ca:35:67:d9:91:ac:39:74:2c:a8:64:7d:69:2e:
76:27:ba:79:5e:ad:61:52:1f:d8:25:0f:cb:5b:bd:
c5:2d:c7:f8:10:93:fe:54:4d:6e:9e:70:af:37:50:
54:35:c0:69:09:7b:03:fc:75:ff:f0:64:96:3a:b9:
6b:7a:43:e1:de:f8:c2:1b:4e:97:9f:49:3c:e7:f7:
b7:50:97:3d:66:b3:e9:fb:f0:fa:2b:1d:d9:ad:68:
e4:5e:14:39:72:f2:9d:6f:f5:76:aa:74:fb:88:08:
7e:02:c7:ea:fa:40:14:fc:b5:c9:e8:3c:a1:5b:0e:
ab:86:34:cd:5b:35:2e:94:95:da:6b:45:de:68:63:
4f:19:0d:d2:c2:47:f5:c8:0b:fa:14:8a:d4:19:51:
27:f4:45:fc:15:df:35:e0:e6:c3:e5:b5:23:b6:d8:
ff:7c:fa:de:49:d7:19:21:89:d4:a1:65:1b:cc:72:
e6:66:5e:9b:99:0a:07:db:86:c2:96:10:a0:91:8a:
1b:52:b7:45:84:c5:5e:eb:07:7a:1c:f2:60:f3:6b:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:56:21:AA:D1:35:F1:BE:1B:82:D9:30:E8:5B:BA:0D:63:3C:FF:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f3d02ee-032e-364e-ac5e-b4bf963d99cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:ad:8b:bc:43:1e:df:c2:a2:80:0c:20:a6:27:3a:95:43:2e:
48:bf:98:8e:33:92:69:b8:b8:95:5d:4b:ba:49:a4:46:6a:4f:
a4:63:f4:c3:4c:a2:68:6a:00:9e:86:71:04:f9:94:21:df:21:
c1:75:58:51:50:dc:de:57:5e:4e:f3:7b:79:21:39:ff:cd:56:
e1:33:29:9b:77:e1:20:fc:94:ca:56:84:f1:33:fd:02:38:e8:
ed:0c:fd:fe:fa:fa:da:d5:14:a8:0a:01:ac:78:d3:4e:cd:af:
83:ad:42:b7:21:70:50:82:1e:fd:63:13:29:a0:9e:8f:af:40:
f6:1f:56:48:ce:c1:39:3a:b3:8d:75:a3:41:03:84:7a:80:0b:
23:cb:e0:03:bb:0d:50:00:4f:ff:4c:f0:89:7f:9a:01:40:65:
b7:61:c8:89:38:60:73:e7:22:a7:05:3c:71:e1:50:62:68:27:
f3:e8:ae:18:1b:e4:4a:38:f3:45:7e:35:5b:16:8f:ae:f1:ef:
8d:ca:02:12:dd:a1:af:75:4e:d4:c6:db:9e:05:c9:bf:0e:d8:
56:d0:b9:9a:7b:65:e1:bc:df:14:c2:34:80:d3:8f:c1:3e:e6:
a3:4a:e8:69:c5:f9:36:63:cb:cf:42:8c:25:52:a0:1e:f6:ed:
0a:ad:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:06 2025 by rpki-client