Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa
File: f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa (raw, json)
Hash identifier: y3tT7wpCgyj9/ZXdFscJuc3x+ziPuXnO2+T+uRy5hM8=
Subject key identifier: CC:F7:18:3E:39:57:A2:87:12:76:E0:BF:24:AF:D2:F5:67:81:80:DD
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858489BA0A82289B9464D82093980
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 2559
IP address blocks: 198.217.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:a8:22:89:b9:46:4d:82:09:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=c3d4df6b-2da1-4a93-99ad-88fa1d04e485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:c5:4d:ad:bc:75:04:f5:27:30:2e:40:2e:
21:9b:a1:bc:6b:74:5c:08:fa:2f:28:33:16:12:35:
af:9f:fe:f9:e7:7d:3d:a0:90:ff:91:f7:1f:d2:40:
f7:67:f7:af:90:d6:f6:d3:a4:66:5d:b9:ee:80:4d:
22:e4:53:a5:07:cd:82:7a:2a:18:40:42:ac:11:3a:
e2:05:53:4b:ff:45:9a:0c:f5:d8:ac:9b:ba:36:86:
40:5b:2a:29:c5:f0:b1:21:0f:9a:98:f2:b5:39:ae:
3f:5c:b0:a5:09:3f:a2:f4:cf:b0:04:93:ab:ad:fb:
cf:7f:6f:0f:ef:d5:9b:0e:0a:61:f2:61:59:b4:1f:
62:ad:4b:6d:c1:63:6c:55:62:b5:f8:bb:fb:2f:b3:
6a:38:c7:24:51:22:e9:8f:1c:23:33:71:45:3e:9c:
fc:2f:bc:4a:3d:e0:62:79:28:80:b6:70:64:1d:07:
73:81:d3:e7:44:06:89:d6:1d:d8:99:41:80:80:ec:
52:e0:15:86:fb:a2:62:85:49:ea:0e:b5:87:7d:da:
c2:cb:94:bf:9d:57:de:03:7f:42:03:0f:7a:0e:57:
c3:ab:18:2d:e3:46:4f:88:cb:a2:12:dc:97:a8:28:
fa:4a:10:ec:b0:3f:e4:28:5b:a0:6c:42:dc:59:36:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F7:18:3E:39:57:A2:87:12:76:E0:BF:24:AF:D2:F5:67:81:80:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.217.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:fb:f4:c0:da:8f:c6:fd:d1:4a:47:ed:83:77:db:7f:61:2f:
a5:3e:bf:a8:1f:bc:5d:0e:f6:cb:0b:a6:f2:81:02:fc:5b:17:
34:21:36:a2:78:da:86:45:d3:47:7f:35:17:e1:40:84:f8:cc:
24:7c:aa:ec:18:d4:be:45:b1:4e:6f:f3:04:f3:5e:c3:f2:86:
07:3d:b8:27:f4:db:1a:2c:cf:7b:33:f9:24:30:9f:31:f3:42:
92:e2:f0:c7:15:d5:65:89:75:c7:22:e9:9f:a3:00:3c:64:61:
6d:a7:af:e4:2f:4f:79:53:44:c7:87:6b:4c:0c:06:81:ad:bc:
5b:39:08:9c:65:d7:ec:59:4e:bd:70:0a:51:26:a7:1d:94:2e:
b8:42:4d:77:ce:c3:74:57:09:27:22:af:a7:51:e4:1d:c5:6c:
84:45:c1:9e:ec:e2:f9:48:a5:0e:d3:e1:39:17:2a:0e:70:b4:
35:0c:6a:58:1b:f6:ff:15:aa:c3:17:6c:82:3b:4b:2d:80:22:
01:a6:7c:77:15:05:17:cf:0e:4f:81:e8:8d:78:ae:df:1b:12:
3c:2f:30:bb:40:10:6e:6b:e2:41:6a:dc:da:1d:aa:3c:ec:21:
a2:b2:c0:24:f2:93:8b:f0:3a:6f:80:db:03:fc:8d:0f:88:8a:
c2:2d:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:12 2025 by rpki-client