Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c1ca1801-c622-3da0-a442-ab5532c40db2.roa
File: c1ca1801-c622-3da0-a442-ab5532c40db2.roa (raw, json)
Hash identifier: FNtauFZCQ6qxHWqXfRMnDopt3ODV15cjflXG/hS5t8k=
Subject key identifier: D3:E0:6F:60:6D:B5:02:E6:88:F2:57:24:6F:CF:0F:8A:E5:A7:46:9B
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858489BA0A6F2F159DB3A8B208240
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c1ca1801-c622-3da0-a442-ab5532c40db2.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 2559
IP address blocks: 198.241.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:a6:f2:f1:59:db:3a:8b:20:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=535a5644-9633-48ed-aab7-24ab0e202e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:a1:aa:c7:b0:1d:67:e9:19:b6:d8:31:7f:
4b:64:b0:9b:af:90:a6:51:15:f4:d4:ba:8c:56:78:
80:a5:0e:d9:3e:0b:0e:01:a9:2a:e2:df:ee:85:23:
cb:8f:92:ad:03:f5:e4:a9:a5:47:26:ce:b7:a7:6b:
10:32:6c:67:27:54:6d:f9:47:29:11:80:73:39:93:
11:0c:5d:14:bb:fb:fd:bf:25:53:0b:de:3c:80:06:
59:c3:9f:fd:e2:ce:da:7a:63:da:d1:6e:19:f3:6a:
53:9c:03:4e:dc:21:20:07:29:cc:1a:a1:27:44:d8:
15:65:fa:28:7f:47:bb:60:c7:3d:71:5d:fd:ad:fc:
10:c4:2f:91:a6:bd:7d:83:2e:28:e1:70:45:68:ef:
56:d0:9f:99:e7:98:a2:a9:3a:51:cb:23:02:c0:6d:
2a:bc:70:75:b7:63:78:1f:a1:6d:a6:9f:42:17:8c:
5c:f2:3a:03:4d:cd:0e:35:53:d0:66:55:16:f3:97:
9b:3a:ba:55:cd:f6:57:24:c6:8e:d1:1e:8d:db:fb:
ba:61:2a:63:c5:60:81:de:92:ee:bb:9b:0d:dc:ec:
35:0e:2a:e7:48:2b:55:89:84:3d:dd:69:ca:53:8e:
2e:94:4e:62:04:74:2d:55:69:c0:4f:7b:6e:08:c4:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E0:6F:60:6D:B5:02:E6:88:F2:57:24:6F:CF:0F:8A:E5:A7:46:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c1ca1801-c622-3da0-a442-ab5532c40db2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:e6:08:46:1b:ce:cd:4f:d4:35:38:79:ac:4b:af:ae:b1:cc:
ce:bb:07:9c:88:09:74:fa:6c:ad:f0:5d:48:3e:50:a7:4f:4e:
20:d5:6b:3e:89:30:eb:39:6b:d6:1d:87:b6:b3:f4:e8:7e:8a:
3e:72:d9:d7:f4:cd:67:bf:74:d3:15:3e:ce:51:b0:55:d9:29:
55:d8:7b:35:92:e5:7b:4c:cc:b0:f5:7e:d7:e4:58:9c:ae:f1:
e2:e0:6b:45:c9:31:91:53:e6:e4:9b:b2:58:15:80:bc:54:12:
fa:90:a3:b5:da:52:28:a0:b2:cd:34:16:2b:76:40:20:aa:1e:
4e:53:1d:34:5e:0b:a0:c8:a0:96:6f:17:18:2e:3b:59:37:9e:
8b:7e:04:1d:dd:4f:5c:25:fc:aa:ac:d0:17:d5:0e:da:13:e7:
9f:c0:c4:9a:a2:f9:05:06:8f:53:17:d3:99:e9:2b:a6:e0:e6:
8c:ef:2e:f7:09:a1:0c:2b:90:df:95:b8:b9:f1:70:fc:e3:c5:
c5:b3:1d:e1:09:16:43:9d:89:39:16:ce:d4:7c:10:0f:34:c3:
6f:14:e1:43:22:02:90:9a:b5:bd:e4:2e:53:fc:83:46:1f:42:
da:b0:16:21:d3:17:d7:11:03:b9:c5:d7:a1:c2:9a:c5:13:d8:
65:c3:44:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:44:44 2025 by rpki-client