
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/6a790d2b-bde8-3761-a0ab-a46d1338c068.roa
File: 6a790d2b-bde8-3761-a0ab-a46d1338c068.roa (raw, json)
Hash identifier: 5CGfsSKWOpQhK1qLr04tpuyxOdbLqQUtizFMQPKIQCc=
Subject key identifier: 19:8F:95:CF:42:27:2F:97:C8:C2:6F:BB:EC:32:82:4D:28:EB:42:73
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F4328584819CFDC98BAA95F48E7880780
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/6a790d2b-bde8-3761-a0ab-a46d1338c068.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 2559
IP address blocks: 198.241.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:dc:98:ba:a9:5f:48:e7:88:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=d12b4afe-6a6a-480a-a509-8e17c5cbb8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8b:5b:cc:5f:5f:44:0b:7f:c6:a9:8a:0f:0b:
7c:23:06:f2:dc:33:9f:3b:65:b9:bf:46:cf:4e:c2:
e9:38:2b:ff:c1:d8:cd:30:32:20:aa:e9:ce:9d:9e:
f9:00:a0:84:3a:d8:37:c6:26:bc:ed:56:60:40:71:
99:6a:dc:06:01:4c:4e:68:d7:38:f9:09:fd:05:58:
e1:00:d7:ed:5b:1e:6d:d4:c3:a5:37:4b:a5:30:38:
d1:6c:50:74:c6:79:e8:1c:35:5d:b3:23:4e:da:50:
8f:ea:0e:ee:94:df:5c:52:1b:b5:78:a7:ce:1c:4c:
c8:49:21:f7:f0:b7:92:2c:1b:b6:2d:a1:88:91:96:
9c:27:26:1e:02:4a:37:7a:d9:72:ac:f9:ad:5a:a0:
f9:79:80:af:35:00:0f:79:3e:7d:32:84:02:98:1f:
51:61:75:b0:21:ee:2b:ff:13:94:11:6d:a8:1d:50:
1c:48:ce:b5:dc:5c:c4:69:a3:63:92:6f:65:16:3f:
06:04:88:11:a2:a1:69:de:d2:6d:a3:53:55:6d:85:
d0:50:02:5e:1a:20:85:06:fc:2a:f1:2a:e4:2b:d5:
b9:62:ca:95:53:df:c4:08:22:1f:f9:1b:af:70:ba:
e6:6f:0a:fa:13:5e:59:26:62:04:db:e2:69:1e:16:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8F:95:CF:42:27:2F:97:C8:C2:6F:BB:EC:32:82:4D:28:EB:42:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/6a790d2b-bde8-3761-a0ab-a46d1338c068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:7e:11:ea:e2:37:35:2f:26:79:7d:13:27:d5:4f:68:9d:ed:
d9:3d:60:bc:d7:b2:ab:9f:e5:c1:78:07:8f:67:1e:ba:e1:f7:
23:8c:cf:ff:00:08:3e:9a:ff:55:41:71:42:ef:06:c2:14:37:
3d:ef:08:0d:97:8e:06:da:49:cf:3e:1d:23:2c:ca:c0:43:30:
f3:3f:64:49:f2:92:16:d6:c4:16:fd:54:a2:6e:fd:55:59:63:
f0:d8:2b:be:4e:c3:35:9c:e6:d5:11:34:57:73:fa:98:ae:ed:
bc:ac:51:f4:a1:ee:10:1b:f5:2f:94:6c:fc:6c:8d:25:d8:11:
84:3a:59:b6:1d:fd:72:69:ca:2b:c2:16:2f:9a:18:b9:38:a2:
e2:dc:e1:57:6b:14:3e:a1:3b:4a:bf:f7:ed:a9:f5:26:72:47:
dd:cc:b5:15:cf:bc:56:58:7b:b1:26:0a:20:54:19:aa:f7:65:
a8:16:6d:65:7a:77:04:ca:49:36:41:98:74:9d:cf:3b:45:1f:
87:a5:1d:88:32:18:e7:2f:02:12:14:fc:42:8a:9d:79:4b:0d:
e8:37:78:79:4b:f6:3a:4d:e3:a3:0e:c8:79:17:27:a3:21:bd:
9c:23:f6:e7:08:fe:07:0e:78:e8:d5:bf:a6:b0:b9:db:bf:f3:
f2:85:19:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:42 2025 by rpki-client