Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56d38edc-6206-3a86-8cbb-c997db7ab927.roa
File: 56d38edc-6206-3a86-8cbb-c997db7ab927.roa (raw, json)
Hash identifier: xZrk2W/k7D8Lum55E23pXSJBqtIOA+R/nzzfyZ3EfFQ=
Subject key identifier: 19:4A:D6:B0:CF:AE:2C:EF:2A:13:46:0F:43:99:B9:FF:3B:40:EA:E0
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B2CC43773F04879837500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56d38edc-6206-3a86-8cbb-c997db7ab927.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 198.45.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:2c:c4:37:73:f0:48:79:83:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=ccae3bc4-67e1-456c-ad97-d707f6cd86e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:3d:43:2b:0d:13:6c:39:85:44:07:f3:88:
f8:74:00:00:1e:0c:48:b4:e9:10:9b:f0:7a:09:a2:
16:4c:16:1d:60:b5:77:9e:14:91:d5:7f:1d:46:29:
7d:1b:59:af:2b:ff:9f:ed:8b:99:81:41:a2:92:55:
e1:06:94:31:2d:37:8e:26:dd:1f:cf:67:82:99:38:
a5:8c:87:28:58:ed:c9:70:6c:b8:6d:92:55:2b:2e:
69:09:43:3f:fb:4f:6f:00:c8:70:9e:d6:57:13:d3:
3d:aa:dc:bd:2e:13:5f:01:f5:24:cf:62:c6:52:23:
23:07:3d:26:cf:a1:6c:af:94:ea:c1:70:42:23:e2:
1e:59:4a:1c:7c:08:a4:37:bb:af:35:fc:e9:82:3e:
17:1a:4e:8a:52:e3:92:f8:d8:77:f3:ba:87:46:2f:
77:66:36:f7:e5:01:90:64:18:56:6c:ad:5b:9c:5e:
9f:ce:0e:64:6d:2a:b0:24:45:51:c3:7b:3f:74:e1:
f0:4a:16:ac:56:66:1d:cc:3c:44:c7:8d:8f:a3:e5:
cf:68:d9:24:30:c4:68:58:e2:39:a7:11:6c:b6:22:
a2:14:06:bc:4e:52:cd:1d:e1:b6:ea:c6:3d:67:7f:
b7:d1:e5:29:a6:fd:7d:92:6d:10:1e:d1:df:9d:84:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:D6:B0:CF:AE:2C:EF:2A:13:46:0F:43:99:B9:FF:3B:40:EA:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56d38edc-6206-3a86-8cbb-c997db7ab927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:19:4d:e3:99:3a:b1:23:82:2d:76:09:df:d6:1f:16:aa:9d:
98:d4:68:b3:c8:f3:14:67:26:be:32:73:8f:d9:f9:7b:4a:a0:
ac:27:71:59:30:f5:59:ea:cd:d8:53:47:0e:18:0d:9e:5a:0e:
f5:5b:d4:3a:e7:7c:8f:ad:4a:c6:9d:ac:0f:9e:3a:df:49:14:
de:df:89:dc:94:63:80:aa:84:21:88:b4:b3:29:c4:91:99:95:
1f:ee:7a:06:a7:60:36:c8:59:35:6a:f1:80:b9:37:1d:e6:c7:
06:0c:7f:fd:0c:0e:00:53:c3:7a:a1:98:47:b0:9c:f3:53:67:
f0:6e:cc:c7:33:6b:b2:30:ec:4d:56:3e:d4:69:6d:45:b0:cc:
e4:af:eb:d7:69:b5:c3:65:e7:ed:c8:6a:f1:b8:c4:1f:55:0c:
1a:ff:9d:0f:17:97:77:d7:a0:94:1e:74:ad:30:2a:0e:ac:26:
7d:90:54:e0:9c:d0:7e:90:69:1e:32:89:63:b9:f1:e4:c8:a9:
23:6a:09:05:0d:61:ba:98:4c:9b:3d:ff:ef:52:53:c8:54:33:
94:a3:da:89:7f:3c:83:b0:f0:a8:cd:b3:3a:7a:91:27:88:93:
e1:28:ed:85:f4:f7:b6:1b:f7:0f:69:82:af:93:21:ed:fa:92:
e2:74:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:57 2025 by rpki-client