Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa
File: 3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa (raw, json)
Hash identifier: 25lq+1rfX9tsrOyyxDgzJHuzbyZjn+rV1Ca5HRihEaY=
Subject key identifier: C0:43:31:3C:2B:63:D8:14:D6:4B:84:D6:93:56:8A:7A:04:8F:8E:98
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848387DEAE40C6D2C4B01D2A180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa
Signing time: Mon 16 Dec 2024 01:45:52 +0000
ROA not before: Mon 16 Dec 2024 01:45:52 +0000
ROA not after: Sun 16 Mar 2025 00:45:52 +0000
asID: 395747
IP address blocks: 198.41.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:7d:ea:e4:0c:6d:2c:4b:01:d2:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 01:45:52 2024 GMT
Not After : Mar 16 00:45:52 2025 GMT
Subject: CN=21f7d6b5-a4a2-44d0-8611-c5674ac5c72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:2b:5a:1e:9d:9b:10:f0:a8:73:22:20:db:
30:5b:6f:0b:4d:e8:98:f7:22:89:a0:05:39:ab:68:
3d:16:0f:e6:67:07:75:67:b9:7a:27:2b:08:a6:90:
17:89:e6:7a:42:50:ac:0d:4b:e1:d4:09:df:0f:ee:
59:3d:d2:8b:5f:13:aa:25:25:27:58:bc:88:3b:64:
b8:10:cc:53:45:0e:e6:42:3d:d1:2a:61:0b:b8:0f:
9c:b4:e7:bf:8a:cd:95:56:a0:70:5a:50:35:ce:33:
c2:cd:c4:83:14:9d:8c:74:20:1b:3c:2f:6b:1f:b8:
09:91:ea:ad:fc:1a:ba:b6:a6:61:41:57:68:98:a4:
d4:68:4a:a2:da:4f:ff:8b:a6:f6:3f:38:b3:b5:bf:
0f:76:5d:99:20:c7:dc:c4:ce:f4:ab:13:55:5e:d3:
8a:24:0e:3c:8d:5a:ec:19:cb:84:56:a2:3c:86:59:
13:0f:7f:ba:5e:8f:91:08:5f:4f:66:07:f3:b0:79:
99:ef:01:ec:22:d1:19:29:46:c6:03:8e:87:c3:e6:
e3:db:3b:cf:dc:4a:b7:ac:03:79:69:f2:de:9a:be:
a2:ad:a3:5e:ec:53:c5:bd:29:02:7c:69:c3:53:d0:
5c:7d:e4:1d:dc:d8:bc:36:cb:1e:94:91:87:ae:37:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:43:31:3C:2B:63:D8:14:D6:4B:84:D6:93:56:8A:7A:04:8F:8E:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:ff:86:f1:d8:93:7a:06:6e:6f:be:ce:4a:b8:d9:56:9e:60:
9f:b1:8d:07:a5:cf:09:8f:29:0e:e5:2f:8e:27:1d:e5:03:1f:
85:cf:00:5e:e5:98:ec:c0:f3:d2:75:2c:c4:5b:c0:c6:4b:70:
7b:39:7f:e0:18:61:eb:3b:9c:51:39:06:b5:50:7b:1d:ec:7b:
17:d0:44:10:7e:3a:00:bb:8a:ea:cd:cc:c1:5c:a0:2c:28:17:
e1:74:06:3a:75:c6:cb:a7:98:a2:f6:66:2c:58:b2:dc:d1:84:
80:04:32:dd:45:c7:87:0d:92:a0:75:66:34:58:c2:5f:dc:12:
71:04:2d:ea:f0:52:40:fa:91:0d:9a:34:8c:32:ee:9f:19:37:
be:66:57:9f:3b:6f:20:4e:4a:0d:ac:3e:d1:fc:41:39:97:19:
47:54:b1:35:ff:98:b3:76:d6:72:c5:2d:0e:16:b0:1f:f8:ed:
04:86:86:c7:0f:30:1a:49:e8:61:b5:b0:92:24:f0:80:7f:d0:
d4:9c:bb:16:94:ed:d5:3a:d8:d9:15:ba:48:20:dc:dc:e1:85:
4e:f6:0f:3d:e4:b2:81:64:34:bd:54:20:98:1d:40:1d:7e:18:
1a:f8:0d:9b:2c:c9:13:dd:f5:f3:e7:68:91:0f:db:e2:72:ad:
5c:d7:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:24:03 2025 by rpki-client