Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa
File: e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa (raw, json)
Hash identifier: niDAl53JLVE4BJwbCjHIdlEdofcy07nCU/j9yFvz1CY=
Subject key identifier: 60:A7:A8:F9:F6:A7:E8:11:F0:4F:EE:96:6E:B4:3A:F8:DF:AD:CA:45
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F43285848DD3BAA106010D3EA8BE80600
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 2559
IP address blocks: 198.241.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:aa:10:60:10:d3:ea:8b:e8:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=d6dd4e2f-ffc7-450a-b653-cee50575b14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:57:76:14:c9:5f:4d:6d:bf:7f:f5:93:3e:
ac:1d:0f:f4:6e:c4:6d:72:a5:f7:6e:26:da:13:d7:
7f:da:33:10:53:94:c9:e7:96:1c:7f:5b:23:ac:84:
35:a4:5e:ad:b5:41:77:f2:00:8f:8e:15:a4:06:ca:
39:08:5b:4e:34:e4:cc:71:13:af:74:9d:8c:22:05:
38:96:29:5f:f6:52:06:df:b8:9a:59:b1:1e:76:a2:
5d:94:cd:7c:c7:b2:45:96:76:5e:64:29:c3:64:3d:
1d:6b:76:da:3a:83:51:e5:59:c9:2d:75:fa:64:31:
6b:f3:75:92:fe:13:dd:0e:8d:25:44:df:55:4f:9a:
fc:b1:3f:2e:8b:3c:29:a2:2b:14:bf:55:40:bf:d6:
9a:cf:7b:60:16:c3:2d:d1:0a:22:30:cb:87:28:86:
44:7d:b5:18:02:8d:9d:7a:0d:84:57:65:97:55:ad:
7a:fb:ca:59:0f:e6:e6:d9:e9:6c:ca:ad:c4:b8:57:
8e:f9:b1:b0:a5:99:fc:25:6c:17:25:6c:77:d1:cb:
e1:20:de:3c:d2:94:3d:1f:b4:52:e0:42:84:02:fa:
61:c4:4a:49:df:96:f9:ae:06:9b:f3:e0:c1:7b:35:
c4:79:d3:f7:dd:f4:21:d7:86:5c:c2:65:6b:ae:6c:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A7:A8:F9:F6:A7:E8:11:F0:4F:EE:96:6E:B4:3A:F8:DF:AD:CA:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:b7:1f:68:b7:17:9c:6a:e0:94:ea:fc:29:16:46:72:1f:a7:
2a:18:5e:83:87:68:ac:95:24:1e:71:9c:20:2a:e3:63:d5:72:
d9:d6:1b:06:68:f0:24:81:a6:00:4f:26:3f:07:74:e8:1d:77:
af:24:64:e6:13:80:c9:56:56:7b:e3:44:56:0d:bf:0c:c9:50:
ea:35:d8:49:16:6c:87:99:c2:3a:ba:9f:ba:f0:36:17:24:4c:
c4:ed:60:44:4c:58:b9:56:db:c7:71:38:1f:59:16:2b:ff:25:
80:a7:a3:2e:ef:98:dd:c1:e6:54:07:67:8a:42:bc:e5:5d:d7:
63:9a:53:e9:8d:db:83:10:83:23:86:f0:eb:13:0d:99:6d:13:
e6:41:9c:10:73:a3:41:a7:34:53:3e:7c:df:85:f1:3c:9d:25:
5c:41:5a:62:f7:b4:97:03:79:37:24:03:4b:00:67:9f:f5:bd:
87:80:c0:6e:7c:39:50:96:4c:05:f8:6e:2c:4a:84:72:f3:9f:
1b:d3:e7:3d:85:1f:ca:d8:27:7e:e5:40:f7:84:0a:8a:87:8c:
d8:0d:1f:f1:3a:9e:0e:06:d6:0c:17:74:59:5f:4f:45:76:72:
13:68:83:39:50:9a:32:c5:f4:ae:06:07:a2:b8:73:a8:e5:c2:
0d:63:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:09 2025 by rpki-client