Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa
File: e5e560e3-7114-3301-9261-7725a1241fa8.roa (raw, json)
Hash identifier: yXCmLzKXzPKjBd3+62kCOOFubAssV2+roJVPjzk6Ngw=
Subject key identifier: 7E:F9:71:02:1B:77:AB:BA:E4:4F:E0:8C:83:89:16:D5:13:53:C8:CE
Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7
Certificate serial: 010D0C9F43285847E094BC1351570E9C338D4780
Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 4186
IP address blocks: 198.137.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:bc:13:51:57:0e:9c:33:8d:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=45e77fd1-ebf9-4c32-8557-661325d3b71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:26:69:b4:8f:00:54:ef:4f:73:ea:a8:e9:
d4:e5:0f:52:71:a1:d0:89:9d:61:71:4f:f8:92:3f:
91:6e:a7:61:41:50:aa:0f:24:56:e9:fe:0c:0c:58:
98:94:d6:65:87:ac:6a:76:70:d6:bb:e9:40:d5:5a:
13:3b:01:8a:4d:74:91:56:88:6b:64:29:8e:36:86:
be:f3:1e:37:9f:53:53:48:24:bb:74:71:3c:51:c4:
e7:fb:21:04:b4:25:7f:14:6f:05:16:8c:9d:8b:f0:
d1:ff:08:a2:bd:e0:2f:8b:94:6a:2b:a8:ac:3d:03:
35:dc:68:9b:6e:22:5a:87:9c:ce:78:55:00:38:59:
78:61:9e:31:54:3b:c1:dd:63:ca:d6:84:a8:07:86:
9d:4c:b2:a0:1e:c3:c6:f1:76:75:16:50:95:95:8d:
35:a8:09:5e:0f:80:a5:80:1e:a2:19:82:97:4a:c9:
8b:00:d8:53:d7:4c:e0:29:22:98:43:7a:7f:8b:4b:
e4:e4:63:42:d5:d1:06:ff:4f:3f:73:c9:53:b0:7b:
49:d3:ad:e8:f2:87:ce:10:ab:9b:29:ad:87:cb:45:
1c:32:16:39:b5:60:da:01:61:2f:4e:c7:a4:1b:0a:
63:90:05:18:76:90:3c:94:ac:86:42:da:cd:d7:0e:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F9:71:02:1B:77:AB:BA:E4:4F:E0:8C:83:89:16:D5:13:53:C8:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl
X509v3 Authority Key Identifier:
keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.137.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:05:55:63:bc:7b:4e:e5:29:0b:67:1c:66:ae:ca:62:3b:35:
2e:e9:c9:5a:6e:ab:df:82:a1:b8:f1:5a:49:28:c9:69:89:35:
c1:3a:83:62:b8:c8:2c:5e:ce:66:8a:81:cc:1b:24:fb:a3:d0:
f5:e3:cc:44:e5:85:64:91:f0:a3:86:cd:7b:a6:fd:af:fe:09:
2a:e7:84:2d:3f:8c:7f:a8:cd:e4:c3:84:f7:ba:94:41:85:5f:
68:af:5e:a8:80:32:69:4b:4c:7e:9b:8f:b9:93:98:7e:7c:ca:
33:15:2a:66:e9:13:72:9d:99:9e:d0:87:3e:af:3c:2c:56:3a:
1a:62:4a:b3:cb:40:df:01:67:56:45:2c:cd:18:0c:55:fe:ef:
5c:31:16:a0:75:ec:38:e7:0b:46:cb:88:68:4b:f9:38:cd:94:
f8:73:1d:aa:3a:5b:43:09:3d:b6:32:8c:95:c8:82:58:46:70:
ef:3e:07:e0:57:89:27:45:ff:41:96:6a:5f:24:7c:e5:81:23:
99:d6:23:f9:42:47:c4:de:78:7a:61:77:53:b8:a6:b9:ff:4b:
72:1e:4c:27:e3:e2:33:3e:41:a8:7b:eb:3f:a6:77:f1:af:2e:
11:c7:22:12:11:1a:46:4c:bb:52:c9:7b:ff:d6:b1:53:1d:53:
28:9a:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:38 2025 by rpki-client