Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f925b585-cac7-38a2-b727-438cb5b1ce22.roa
File: f925b585-cac7-38a2-b727-438cb5b1ce22.roa (raw, json)
Hash identifier: XaqyyNfeuiJg4Arx3gxFeytZf4iaFdPnjdNk8NJdL5Q=
Subject key identifier: 17:2A:EB:8B:E3:28:9D:AF:17:96:A4:7E:7D:88:76:17:49:E8:C5:43
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858489BA0A8C52B430614716AB040
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f925b585-cac7-38a2-b727-438cb5b1ce22.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 2559
IP address blocks: 198.241.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:a8:c5:2b:43:06:14:71:6a:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=3712f3ae-6e8e-4c0e-97e0-bb74f3fa59c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:48:f5:76:91:1b:6f:b0:dd:69:64:e5:ab:
96:80:1b:a9:76:58:c2:c4:60:56:d3:57:f2:60:7d:
35:6a:34:00:64:09:e0:7f:6f:2e:34:e6:67:65:34:
fe:5b:70:64:d3:e9:26:ab:53:22:ac:1b:3d:69:06:
91:21:14:b5:eb:5f:d0:c2:3d:d2:26:c3:4a:26:67:
3a:8e:f8:e2:9b:20:e1:89:b2:39:81:f0:ea:9d:bd:
93:93:c6:8f:07:7e:f3:df:4a:8a:5b:54:ab:8a:b4:
ba:f9:1f:a3:54:60:7e:bf:99:65:28:4a:de:c1:37:
1c:3f:9d:82:25:7f:1c:db:d6:65:4b:a7:c8:8f:fb:
d4:34:09:57:bc:21:e5:9b:9c:48:6a:59:6e:89:10:
e0:46:d2:c2:a5:70:93:f2:a3:ef:85:6e:f1:f3:41:
24:23:51:27:cf:42:91:e3:c1:6d:cd:76:eb:a9:93:
9c:02:1d:c1:f4:5d:7b:63:a7:c0:4a:ee:8e:fa:00:
f2:be:fb:a8:ee:f2:cc:6e:e0:be:4e:38:bf:07:0e:
31:77:9d:3e:64:6b:e5:b7:77:68:8d:25:ac:78:87:
9b:df:41:48:7a:ac:ed:a4:f0:04:17:21:f1:f7:35:
da:25:16:c2:79:61:69:b8:1f:c5:3b:34:1b:06:82:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2A:EB:8B:E3:28:9D:AF:17:96:A4:7E:7D:88:76:17:49:E8:C5:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f925b585-cac7-38a2-b727-438cb5b1ce22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:f2:92:7c:32:c6:b0:72:ae:82:6d:43:69:e0:20:cd:ff:57:
1b:bf:12:6b:bb:9b:a6:92:22:3e:1e:43:82:92:d0:f5:1b:e7:
c5:b3:d0:94:f8:49:25:40:db:39:43:e2:b0:aa:8c:ef:59:5f:
8b:03:02:39:ca:de:57:32:22:96:9a:0b:7f:1f:0c:78:9e:68:
af:cd:a1:39:a0:5b:6a:ff:c2:9a:67:b3:e8:c7:43:9e:96:64:
77:33:9f:8f:99:42:84:0e:af:68:f1:5f:c1:f8:04:bc:c5:51:
9c:89:38:8a:ee:f2:5a:57:4c:20:98:06:2f:49:d4:60:db:31:
97:68:31:67:35:18:bb:e1:c3:b0:bb:58:61:7b:b3:a0:84:b1:
f0:10:8d:e3:c8:72:0b:6a:6c:6b:08:a7:33:46:76:f4:b3:69:
5c:fd:28:5c:32:f7:33:5d:5f:72:bb:44:2d:c7:e7:89:67:45:
b9:68:e1:83:69:5a:ef:10:85:6f:c4:b9:21:10:bf:50:ba:93:
7c:c7:de:09:96:fd:7d:be:82:93:69:d4:75:0e:41:0e:43:74:
b2:90:8a:6c:ec:7c:64:0f:6e:de:08:35:d0:70:5b:3a:b2:8b:
12:a9:d2:1e:c5:ca:b6:af:95:f3:b7:12:26:4f:19:f6:26:76:
c3:c9:36:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:31 2025 by rpki-client