Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
File: 2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa (raw, json)
Hash identifier: q5K7R8GbRlmf/VdvI5jUmJQklthTjgoCyHZZqpIIk2Y=
Subject key identifier: E4:E4:0C:2D:85:8B:CD:F9:6C:03:69:59:37:3D:76:50:5D:6D:5F:6D
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F43285847FDE4DDCAA0D41DA25E6A7480
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 2559
IP address blocks: 198.241.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:dd:ca:a0:d4:1d:a2:5e:6a:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=5183dafa-a2c2-4a5d-ad3d-5093e9d6bb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:c7:0b:2e:c5:ca:53:40:27:38:d3:56:b5:
f7:40:93:7b:0b:c0:6c:0f:72:e7:20:11:3c:e4:8e:
04:e2:3e:9b:4e:11:37:d0:fa:b7:fe:bc:76:b4:21:
5d:22:93:ea:f6:4e:6e:33:27:6b:2b:5e:7e:d1:97:
06:8d:2f:04:f6:82:16:4b:90:37:cb:d9:2f:7c:56:
17:f5:06:11:6a:bb:af:32:52:04:1f:dd:c9:f1:39:
5b:74:03:94:7e:75:83:62:64:d2:e7:34:fb:ca:84:
00:59:c9:ce:41:6b:1f:44:62:10:25:c2:46:02:fb:
85:d0:05:11:fd:11:67:1a:04:74:16:51:53:ce:b0:
67:db:d2:57:65:d5:52:25:d7:95:d6:86:5f:d5:76:
06:d0:1e:1e:e1:7c:58:b7:58:60:7e:c5:79:40:3e:
37:69:8a:cf:45:c0:19:8d:55:69:9c:f0:30:34:cf:
11:cd:5c:b0:af:ae:48:b9:51:ba:2f:9c:03:16:86:
cc:51:c3:78:47:6f:2c:72:9b:6e:79:5d:b9:c4:0d:
b8:5b:eb:6d:ed:04:14:e5:d2:de:5c:de:62:73:61:
05:8a:d5:80:8e:cb:bb:c5:d4:fd:f3:7c:a4:97:6d:
a7:08:8e:6d:49:f1:43:6f:42:76:63:37:08:50:c6:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E4:0C:2D:85:8B:CD:F9:6C:03:69:59:37:3D:76:50:5D:6D:5F:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:7e:56:40:1e:8e:23:91:86:24:1f:3f:e7:55:17:54:4e:74:
29:77:df:86:04:42:48:c7:db:ee:19:a4:5e:ac:3d:d5:94:00:
3d:cf:ce:3e:6c:c1:95:50:8a:3f:32:e7:b9:37:77:11:56:11:
93:4f:05:5d:01:42:e6:08:ea:eb:49:94:b8:cf:77:20:df:f8:
1e:2c:b3:54:7d:6e:ed:b5:3f:a3:c3:c3:05:02:c9:79:6d:8b:
7b:e6:e5:52:2f:d1:1c:10:5b:c4:cc:0a:ee:90:ed:a2:8a:44:
b0:6a:7d:9d:ec:b9:5e:75:65:08:42:ac:82:15:df:26:15:09:
e6:fe:dc:e0:cb:c8:42:ea:dc:f6:f6:7e:c8:d4:bc:0e:6e:34:
f2:64:38:40:7e:dc:0e:d3:22:3a:38:0f:10:30:10:ba:c7:7f:
15:80:08:b1:d5:b9:ca:d6:d0:92:8b:a7:94:2f:d4:d6:1d:e2:
4f:af:eb:e4:e1:9e:77:7a:47:d2:64:99:e1:a2:ac:4e:a9:29:
a2:b0:ab:11:d0:06:a4:be:e1:b2:8f:54:00:17:7a:9f:66:9d:
ce:93:df:ca:e1:96:73:ed:9e:a7:7d:01:77:d0:46:b0:92:91:
d8:43:c6:29:89:d8:bf:89:e1:c6:66:8b:93:d3:ca:1e:05:ee:
c1:6e:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:56 2025 by rpki-client