Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d874f7f7-d118-3d67-ac93-8842acd7ca86.roa
File: d874f7f7-d118-3d67-ac93-8842acd7ca86.roa (raw, json)
Hash identifier: iwO9iYUOFGfyMHM43AjuZh4FmF4Whhp+TjpVCvJXZ3s=
Subject key identifier: 1B:F8:74:B6:F8:E8:CC:0F:09:03:21:0E:91:81:58:D9:1C:99:FB:61
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B2DDC6FD73BA8B5307520
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d874f7f7-d118-3d67-ac93-8842acd7ca86.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 198.45.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:2d:dc:6f:d7:3b:a8:b5:30:75:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=3c0d1b30-9d24-4b9e-9ca8-94d2391eccce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:6c:da:93:33:12:ef:9f:2c:ba:c7:9a:3e:
2b:a8:63:f0:29:29:cd:ea:8f:2b:11:98:82:18:12:
3b:b3:ba:c2:47:06:38:40:00:04:90:77:ba:8d:15:
91:c3:17:7a:0c:33:43:0c:38:14:07:e3:f0:5e:85:
b1:72:54:90:ae:a8:80:d3:72:9f:6e:62:dd:d6:e6:
ef:43:6d:5f:c7:ab:40:58:c9:d5:70:be:6a:4a:f6:
16:a4:f9:39:f5:3d:49:3d:73:68:72:bf:3b:85:93:
d1:86:a0:12:96:35:3a:5b:e2:0a:62:16:07:aa:95:
15:7f:6d:0d:59:56:0f:51:1a:de:33:f6:61:04:aa:
92:ea:54:33:ac:f3:44:8c:dd:9b:d5:8e:e2:5c:d3:
78:bc:cf:f1:b3:8a:01:d0:4b:a4:4a:2f:99:03:e3:
8f:fc:2b:b3:0b:21:d2:74:8e:ed:59:eb:82:f0:67:
db:57:16:8c:0e:39:8c:9c:c0:75:15:09:3b:48:ab:
f2:01:06:52:c5:7f:08:2c:87:5f:aa:fc:25:8a:e9:
5f:85:85:63:a7:c8:12:44:a7:6e:d1:11:d1:8d:4b:
8c:a3:d2:5d:c6:d1:72:55:22:61:f5:ac:2f:75:87:
d5:e4:27:58:9d:65:88:57:df:13:58:99:d8:54:ba:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:74:B6:F8:E8:CC:0F:09:03:21:0E:91:81:58:D9:1C:99:FB:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d874f7f7-d118-3d67-ac93-8842acd7ca86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:67:e6:d3:3e:db:9b:d2:d6:60:d5:34:12:6a:b5:94:32:36:
30:58:3f:b5:ec:24:18:06:94:c3:4c:ed:f3:18:e2:01:92:9d:
67:75:05:0f:e6:bc:aa:bb:28:7a:ae:ed:ae:5f:c5:91:30:ab:
f2:42:aa:e2:ba:81:46:83:97:63:9b:fd:3c:c3:0e:5b:e2:64:
ae:a5:99:3a:ef:fc:39:bc:11:89:2b:24:3e:34:dd:c8:f0:86:
f2:52:8f:bd:37:03:34:36:28:e5:ba:cf:71:05:8c:e2:14:64:
fa:45:e9:35:90:d6:0a:1e:8a:c6:9c:7e:b0:84:77:27:8e:0c:
d8:74:15:82:57:ad:06:00:5b:f3:16:13:28:eb:9b:f4:fc:22:
d7:2e:5c:78:e4:94:2f:f9:be:d3:1b:32:52:1f:43:7f:9e:dd:
95:ad:77:cb:f1:3a:f9:7e:ca:d9:ab:ae:3e:33:e4:e8:ef:47:
21:39:a3:a0:2c:bd:2f:39:c8:ad:4b:5a:2f:0a:10:72:27:6a:
5c:cf:b4:3f:ab:4b:63:c7:53:ea:d6:7a:b9:8b:70:4b:84:cb:
1d:58:da:c7:00:9f:6e:c5:a9:78:e8:35:1e:2b:a9:20:be:20:
0f:8a:83:c2:80:25:7b:b2:e3:60:22:6b:a1:5e:98:37:e3:50:
0e:a4:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:30 2025 by rpki-client