Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa
File: f1590f32-a39a-331e-88e9-b1ae0894683b.roa (raw, json)
Hash identifier: GzqLEVTceXKfN6f7He1m8n35MWOiCV2qKLydmmv1ybA=
Subject key identifier: B9:40:33:E2:45:00:96:4D:4B:2E:3A:56:69:E0:5F:2B:04:D3:76:B8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A986F9C5F1C8DEB79E6D8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 198.45.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:98:6f:9c:5f:1c:8d:eb:79:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=36e8c8a0-4f6b-4007-b938-319e520619d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:1c:b9:2c:4a:ac:33:06:58:9b:8b:28:03:
d8:72:a0:b9:ad:36:5b:24:a0:d2:d7:1f:9a:eb:24:
9c:e7:2d:54:cc:74:4c:35:3e:aa:90:9f:b2:83:86:
72:e9:09:35:07:b9:d2:98:60:cf:6d:a8:f8:a6:a4:
d9:91:a1:a4:f5:00:55:dc:e2:d5:bf:f5:e5:c9:32:
7a:0a:fd:9a:a4:ba:c5:03:a2:db:bf:86:5b:de:b0:
8d:3f:35:45:8b:3d:88:da:61:b9:34:ad:79:fb:89:
b1:89:cf:a6:0a:90:eb:5f:2a:8d:1f:2c:82:b5:7e:
04:4d:d4:0f:6f:06:d6:27:d6:bd:fa:15:19:6c:9f:
f6:5a:43:ce:b2:df:0f:f4:95:26:07:27:44:8b:2f:
1c:0a:ff:20:a2:47:fe:bb:c3:31:94:50:5f:6b:59:
d8:d4:93:11:82:19:18:fa:c2:c6:2c:c6:8e:74:a2:
6f:a7:57:20:6b:04:e0:12:13:54:38:ee:ba:98:ec:
75:31:06:2a:33:07:2a:94:b4:78:ad:63:26:e3:66:
90:36:51:14:ec:92:af:79:cd:79:2b:2e:6a:75:f8:
4e:fc:7a:ae:64:b2:0b:d4:fb:46:f4:e3:5f:92:b3:
70:fa:6b:6d:5c:0f:e7:e1:d8:fa:f7:52:fb:ab:54:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:40:33:E2:45:00:96:4D:4B:2E:3A:56:69:E0:5F:2B:04:D3:76:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:35:2b:40:a6:7c:74:df:c8:cf:19:73:7b:62:da:5a:67:d9:
9f:a8:48:8c:0f:47:17:18:a4:cc:e5:e4:a7:57:4a:4d:ac:bc:
e7:2d:52:c6:10:a4:af:22:9b:fd:1d:d7:7a:a1:6a:28:6b:3f:
8c:0a:1e:4f:d6:ea:3e:a8:64:d3:84:1a:52:eb:e1:9d:d0:4a:
1c:0e:56:19:dd:96:74:bc:b2:ef:a7:ec:e5:82:b0:71:df:58:
9c:bc:e5:88:67:c9:18:2d:57:31:be:85:cb:a1:62:8c:89:8c:
5f:c6:cf:5f:df:0d:84:78:86:d8:01:d2:93:a1:96:74:dc:17:
05:f7:f3:11:d1:28:5a:12:6f:49:73:e6:e1:06:4a:48:2f:1d:
b4:0f:6d:b1:c7:b4:28:b2:7a:f3:8d:ae:d3:c1:a9:ca:ed:d0:
58:b0:8e:e1:db:3c:01:2e:09:26:ec:d9:d2:bf:9d:9a:9a:2d:
96:11:e4:28:88:53:9a:bf:e4:98:00:e8:4f:9d:95:53:7a:c1:
19:04:d6:ff:88:53:aa:be:b8:2d:df:6a:f5:56:7c:c7:c6:3e:
04:86:68:bd:41:c6:cf:4e:e4:f0:fd:25:8f:a9:6b:4d:ed:06:
34:9e:eb:a2:7b:5b:82:9a:ba:7b:10:3f:d2:e1:d8:65:b5:39:
3f:37:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:37 2025 by rpki-client