Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/6df3735a-1281-3c75-8e87-c48e2671c709.roa
File: 6df3735a-1281-3c75-8e87-c48e2671c709.roa (raw, json)
Hash identifier: yzA1XzVTiFFc3dohwWliEGRvN8Fmde1ZVo/SVttPk08=
Subject key identifier: 77:07:35:E3:E2:28:E5:94:4D:3E:DF:A8:B6:8A:5C:CA:3D:A8:AB:75
Certificate issuer: /CN=66367942-14b9-49ce-b2d4-9472107e8402
Certificate serial: 010D0C9F432858492CAE82375BD58BEF8653A340
Authority key identifier: 75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/6df3735a-1281-3c75-8e87-c48e2671c709.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 53831
IP address blocks: 198.185.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:82:37:5b:d5:8b:ef:86:53:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66367942-14b9-49ce-b2d4-9472107e8402
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b266c5a6-f1e2-4e4a-9248-de7916bb8298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:4d:60:9d:f8:5f:a0:2b:c3:5d:b0:62:2b:
fb:5c:f6:a3:a8:e7:4a:75:7e:32:43:64:8b:2f:0a:
79:b0:be:fd:ac:59:75:d1:7a:7a:69:7c:51:39:21:
1f:af:c6:18:fc:46:a0:1f:fb:bc:98:6f:30:4e:e3:
60:dc:e0:7e:ad:c0:ab:3c:34:e8:3f:f0:33:b9:37:
d4:97:09:41:58:f7:0f:5d:1a:88:ed:3f:7c:0e:1d:
85:8d:a2:7d:2e:11:e6:ce:6b:bc:10:62:e2:7a:67:
b3:6c:03:84:ed:5b:f4:a0:92:64:5f:45:26:22:34:
70:ca:f4:39:80:eb:7c:7e:0d:3f:d6:f9:13:c3:71:
9e:3f:32:82:80:76:78:ce:b5:15:fb:c1:36:43:f4:
0e:8e:cc:d6:8d:8f:5a:cc:a2:10:a2:22:c6:5f:d8:
0c:ef:a6:ca:2e:c5:dc:90:5d:76:25:19:36:63:b4:
3a:0a:dc:25:2b:31:ec:29:6b:a8:ec:32:b3:32:af:
ed:d8:d8:e0:82:9c:90:6a:68:e0:85:12:ac:57:b7:
92:29:94:e5:3c:ec:dc:b6:0a:bf:54:84:13:8a:0b:
ac:69:fa:9a:14:11:96:64:19:10:58:f9:a3:a3:cd:
0d:8e:58:cf:e0:db:02:2c:91:16:5f:1b:60:d1:b6:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:07:35:E3:E2:28:E5:94:4D:3E:DF:A8:B6:8A:5C:CA:3D:A8:AB:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/6df3735a-1281-3c75-8e87-c48e2671c709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl
X509v3 Authority Key Identifier:
keyid:75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
sbgp-ipAddrBlock: critical
IPv4:
198.185.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:59:16:fc:cf:b5:f0:bf:eb:5a:3f:6c:69:31:3c:b2:d4:5a:
87:d7:6c:89:b1:c0:dd:c4:23:d9:c5:e1:d2:1c:f0:17:ee:48:
11:ef:59:7f:72:cd:e4:ff:52:f8:4c:e8:ff:db:88:dd:51:58:
87:41:0f:13:f2:28:bd:aa:b2:e1:c2:7a:a5:13:24:53:51:21:
8f:84:a2:5a:ce:d2:9e:b8:9f:9b:6f:a3:ad:db:59:24:a1:52:
50:6b:ed:16:83:c7:86:07:17:7d:6c:da:31:3d:ee:b1:1b:eb:
b3:a1:fd:c3:f9:83:ed:a1:ba:17:a2:13:a3:9e:9e:f5:58:7b:
ce:01:a6:31:fd:86:e3:df:e3:7f:7d:e6:c4:4e:6a:26:68:40:
13:e2:84:9f:c2:6e:53:86:e4:df:e9:5d:12:a8:79:75:f8:25:
d5:93:4f:6a:52:ee:94:93:e6:48:7a:d2:40:82:85:23:e9:62:
cf:08:ff:8a:a4:ec:6a:68:10:a7:96:d6:b7:2f:04:60:2c:17:
81:68:88:b4:bd:d6:92:e7:25:7e:50:d2:50:b7:e5:2e:3c:ff:
f1:31:95:97:53:40:29:ef:04:25:21:df:6f:86:e0:48:ef:0f:
c4:26:99:52:31:4c:c5:09:d3:eb:c8:4c:86:39:df:fa:95:3a:
10:70:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:59 2025 by rpki-client