Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa
File: b9e29835-8977-3975-ae14-1a75a5763318.roa (raw, json)
Hash identifier: +++7UThT0ZOf9C2QW2nw2HfhRKtrwBApEYgb8WdWybQ=
Subject key identifier: B3:C2:7E:4D:65:BC:7F:2B:0F:AD:26:F2:97:7F:EF:24:FA:F2:64:BE
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B2E521DF2641CC888AF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 198.45.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:2e:52:1d:f2:64:1c:c8:88:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=e2535c21-575a-48bf-a455-063c27bca850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:9d:ab:d4:95:f2:71:c7:1a:83:fe:e0:1c:
7a:dc:23:68:cb:43:00:de:58:7f:53:44:af:4d:ef:
98:54:9e:2a:35:43:a2:b6:76:a7:50:a5:40:eb:74:
9c:45:60:f3:59:4e:93:12:da:65:84:dc:d7:4b:27:
ae:ee:94:83:61:10:71:02:c7:fd:ca:84:4d:ea:79:
51:21:45:09:04:6e:97:db:63:5d:82:33:31:36:91:
0b:0b:ff:a8:db:ae:ce:0a:89:c4:9b:9d:0c:c9:93:
33:1f:fe:98:66:82:00:a7:a2:87:32:54:32:d2:00:
56:46:de:d1:a2:c6:00:fa:4e:80:4d:76:b4:37:e3:
e1:64:9a:ac:fc:61:e4:d1:1f:e5:5c:d4:ff:8c:eb:
bd:bd:10:aa:92:fa:49:be:53:04:b0:51:b1:05:6d:
73:e9:b1:27:9b:44:04:89:04:91:85:48:52:bb:f4:
da:ca:53:e3:af:76:b4:58:ec:86:a3:39:7e:9f:cf:
3b:62:25:e8:85:77:b3:3a:5b:58:31:5a:6e:58:6e:
8c:95:cd:3d:62:9c:da:72:7c:33:34:a0:05:7a:d1:
d0:c4:19:6b:47:0c:9a:71:44:38:10:a5:01:0d:20:
18:a0:c8:66:2f:73:25:67:49:4d:29:97:9a:43:87:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C2:7E:4D:65:BC:7F:2B:0F:AD:26:F2:97:7F:EF:24:FA:F2:64:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:0f:5e:a5:28:c6:b5:24:31:df:49:c3:e4:66:84:41:b6:b1:
f8:af:9f:5b:46:e3:6a:1d:c4:cf:19:a1:7b:a1:78:0d:fc:d3:
34:e8:fe:54:5f:14:95:f7:41:bb:96:42:15:7c:f4:e8:c5:02:
67:1e:a6:66:b6:06:d5:6f:26:55:d4:df:e3:3d:74:f8:a6:ec:
cd:39:7c:80:93:c3:62:2a:3d:e8:7b:28:ca:c9:a0:da:7d:fd:
4a:1c:ad:40:5a:f9:dd:b8:5d:72:6d:f6:1a:45:f6:a0:5e:48:
c4:e1:6d:26:b2:27:8f:d2:b4:cb:21:2a:b4:e0:03:cf:4f:07:
95:3e:0b:37:57:13:c5:c5:13:48:af:d5:8e:d0:0f:4f:e3:03:
bc:20:29:1a:f1:b2:4b:fa:e8:0d:4a:67:5d:8f:f9:be:e6:7f:
c6:83:54:12:67:0b:55:2a:10:01:8b:e4:6d:36:82:db:b3:91:
71:39:d3:80:71:8a:7e:1c:4d:e1:9b:b5:6d:13:5d:36:f0:8d:
fd:5c:65:0f:8b:72:21:9a:b1:d6:d5:82:d2:22:b0:c9:96:05:
1b:7d:18:05:12:a1:33:0d:b2:d1:54:e3:4a:16:76:14:e0:39:
41:f6:da:ec:63:6e:0b:00:ca:f8:17:25:7f:04:c5:5c:b1:f9:
ff:db:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:21 2025 by rpki-client