Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
File: 995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa (raw, json)
Hash identifier: STROCKWZH6LKkFcd9Eatnf3BY+wcOmrg4mgfqdfZalw=
Subject key identifier: 14:73:63:E3:65:B6:E7:A7:5C:ED:9C:DE:A8:47:8B:6B:E5:F0:40:CE
Certificate issuer: /CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
Certificate serial: 010D0C9F432858487A20816AB65607B7AEEF6280
Authority key identifier: 6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 60011
IP address blocks: 198.199.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:81:6a:b6:56:07:b7:ae:ef:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=692ec52d-e0d2-414f-9a55-4e17f8c82472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6d:56:9f:ba:20:30:e8:d0:86:93:11:d2:c6:
24:95:9e:a2:0b:1d:de:24:78:7f:64:1f:b9:af:2e:
27:64:bf:cf:60:e7:2c:22:02:48:01:70:42:02:96:
05:0a:98:ba:98:b7:c3:cc:7f:06:26:55:cf:ff:20:
62:55:18:11:c3:6a:a1:25:e2:b5:52:c4:a6:13:a9:
93:c6:ea:43:2e:05:c5:86:79:31:6b:34:67:a7:94:
7a:e6:12:65:95:e3:1d:06:12:38:0f:c6:0e:25:42:
6c:de:ec:63:aa:b6:91:19:9d:af:78:9f:4d:01:6f:
f4:15:0f:f9:4c:8f:1d:69:78:22:14:64:44:46:be:
ff:6c:a2:4d:a8:7a:35:db:e8:ff:6a:1f:21:d3:df:
dd:09:0f:67:c6:ec:93:f3:e5:f1:09:66:9e:b7:a9:
f5:6c:15:76:d9:7e:ae:80:08:59:76:4c:f1:bf:66:
24:80:ed:63:70:82:f5:9d:7a:87:59:24:dc:9f:d6:
d1:06:df:71:20:1a:ce:c9:23:69:3b:94:5a:69:57:
69:0b:24:9d:12:95:a8:c8:22:10:24:63:79:51:cd:
22:03:b1:d8:70:bf:38:e5:21:31:df:b4:93:39:4f:
e3:2e:a2:9b:2e:6d:d1:5b:96:30:98:12:5c:0d:17:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:73:63:E3:65:B6:E7:A7:5C:ED:9C:DE:A8:47:8B:6B:E5:F0:40:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl
X509v3 Authority Key Identifier:
keyid:6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
sbgp-ipAddrBlock: critical
IPv4:
198.199.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ca:20:ef:90:9e:81:52:af:91:d0:ed:42:37:61:be:5f:90:
cf:bb:e7:bf:d2:33:b6:42:14:f5:ae:2d:1b:1b:05:18:e2:c7:
8d:2c:47:17:27:8d:08:51:25:3e:9a:7a:1f:d5:04:c3:b1:63:
25:c6:a9:b2:a9:6c:dd:35:1b:a7:69:4c:a4:84:52:26:b9:b7:
b6:7f:6a:5c:ab:58:ab:8d:23:1b:68:8a:8e:5f:35:ff:07:72:
53:b9:36:6c:c6:c0:3f:7e:dd:79:26:2f:cb:a9:37:e5:20:71:
78:b4:15:cc:2e:a2:f6:53:03:a9:73:e8:aa:40:a3:03:85:99:
65:e9:54:27:15:84:74:0e:9c:15:2e:62:65:72:59:dc:3e:c2:
da:43:62:81:1d:00:5f:eb:f3:ca:bc:68:56:83:86:59:9f:73:
3e:ca:70:a4:16:a5:99:7f:b2:fd:ac:47:2d:e5:ad:66:1c:ec:
9f:be:27:3a:1f:6b:b8:ac:24:9d:48:ac:7b:bc:00:66:05:43:
cf:d4:d3:6e:e1:42:54:93:ec:d8:82:ab:25:2d:8d:cd:f1:cd:
34:05:e2:3b:f3:9c:9c:9c:e9:50:1f:a1:9e:f9:0d:3a:34:bc:
57:69:b4:ba:11:98:00:da:8f:d2:3a:77:84:be:c3:56:50:6e:
ba:3e:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:56:31 2025 by rpki-client