Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf17030f-7b9b-3f34-ada8-e304d0eef0d8.roa
File: cf17030f-7b9b-3f34-ada8-e304d0eef0d8.roa (raw, json)
Hash identifier: NWmdGXSX+xFlpSIPvL0XMtQAVkitata6M/Qaxk6vQ+A=
Subject key identifier: 1D:14:36:75:EC:35:F6:59:2C:7B:A9:26:E9:47:E7:88:0B:E9:A3:22
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A990202A5A53236F86D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf17030f-7b9b-3f34-ada8-e304d0eef0d8.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 198.45.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:99:02:02:a5:a5:32:36:f8:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=d5e43ba0-0cff-4232-a838-4f743ed0f562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:cf:07:41:ed:34:d1:83:27:f9:f7:db:ab:
d8:98:ee:99:a5:b6:e9:8d:e6:89:a8:b4:4d:60:c9:
ff:41:e7:33:3d:bd:3f:d2:a0:6c:09:a9:93:73:ba:
f9:11:1a:c4:cc:11:d0:a0:9d:cb:24:65:a9:1f:8f:
77:37:45:ee:af:50:c7:49:3e:5a:06:91:4a:30:f2:
b6:19:3f:01:ef:91:4b:ad:67:fd:e6:fd:76:c9:34:
b8:44:f0:27:6f:fb:77:51:04:24:be:b1:83:94:90:
31:c4:64:43:db:28:c2:c2:e8:9f:e4:00:46:4d:64:
14:29:c6:30:33:b0:42:ce:f5:c5:91:16:5b:58:bc:
6f:f9:4d:f7:27:73:61:b5:18:68:04:f4:58:45:6e:
cb:1f:0b:92:28:d9:e5:f9:66:8b:ed:bf:f4:52:d6:
b1:27:3b:c5:82:f3:bf:e5:79:f4:85:48:0f:98:19:
44:37:86:56:55:68:f9:57:77:13:7c:bb:fb:9e:59:
7e:31:f8:d0:b5:ba:a2:fd:6c:0a:53:fa:65:2e:5f:
ed:f9:aa:24:d8:4c:56:f5:d3:cb:18:22:fb:81:30:
68:df:22:44:29:bc:9c:f3:54:ce:63:c5:2f:6d:c6:
4d:c6:72:cb:bc:4d:21:ec:a3:76:42:a2:fd:80:73:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:14:36:75:EC:35:F6:59:2C:7B:A9:26:E9:47:E7:88:0B:E9:A3:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf17030f-7b9b-3f34-ada8-e304d0eef0d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:d4:e1:26:49:b8:1b:76:6e:80:89:15:a9:c1:73:19:d3:fb:
e2:cf:54:ea:9f:39:a3:d7:27:e0:10:2a:d1:1f:44:4c:a1:b2:
f1:2f:37:29:f5:a9:f9:00:66:64:8e:49:95:f7:29:74:74:b4:
04:33:54:d1:fd:61:3b:d5:58:14:6c:f4:3f:3a:9d:41:14:86:
6e:da:ef:48:a1:d6:51:f8:4f:63:a9:3f:86:4d:5e:c2:46:b6:
1b:1c:d1:ce:e5:b6:29:cb:b3:8e:f2:d8:dd:f7:8c:52:c2:95:
a7:6a:1b:f1:b2:c7:bf:a8:ef:43:0a:ba:4c:9f:4e:90:e9:ae:
b5:13:f2:93:61:5e:af:72:5a:eb:8a:de:ab:6f:fe:16:45:7a:
36:40:65:0c:98:dd:7d:ef:d2:d7:72:9c:55:16:44:71:db:a5:
bc:8a:48:28:42:3d:f6:cf:64:b1:d6:3c:10:b7:9e:22:6a:d6:
56:fb:12:bf:16:e6:f1:c0:ff:07:2a:96:78:a1:75:f4:3b:a1:
db:fc:c7:08:13:c3:77:f4:45:5d:c7:1c:e3:25:69:17:70:b2:
94:c3:4a:c9:74:c2:9f:01:27:ce:09:18:e0:67:d1:48:b9:15:
59:ef:14:a7:13:9c:6b:38:47:f5:78:19:8e:ba:5a:5e:cc:36:
ff:8b:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:43 2025 by rpki-client