Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa
File: eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa (raw, json)
Hash identifier: ZWHvKvWf7UyPowwWnxHJ4MNyd3uwFpXa8Cf2vtbhSzE=
Subject key identifier: 56:BC:C8:5F:10:6A:98:FB:04:AA:7C:F2:2F:4E:51:0C:E9:73:4D:1B
Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial: 010D0C9F432858486D9050AE95D3130DEDC8DF00
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 398797
IP address blocks: 199.255.148.0/24 maxlen: 25
2602:fd1e::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:50:ae:95:d3:13:0d:ed:c8:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=d0760caf-658c-4a7f-aa39-7310e008fba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:70:8b:af:2e:b4:2b:84:a6:e7:4a:78:38:
7e:61:d9:d6:28:6d:c9:e7:dd:29:d5:95:09:17:e8:
6d:0f:4a:0c:f3:ed:bb:ce:22:42:63:78:b3:cd:5b:
f7:3c:b4:43:44:e3:f6:37:bb:db:2a:6e:5e:61:8c:
ec:9b:db:b9:c2:ae:cf:9a:18:e6:12:dc:c8:9c:a4:
46:62:c5:4e:17:c5:cf:83:c8:8b:af:34:1e:ec:42:
95:4c:e7:6e:25:80:57:18:d3:90:c6:94:ef:90:81:
7d:9d:27:d5:ce:38:b9:5d:84:32:75:a1:42:bf:89:
eb:4f:46:2e:0e:4d:ca:e6:ec:26:a4:f5:0b:0c:fe:
b0:0a:d0:45:f5:9c:f0:4e:d6:14:4f:87:8f:00:87:
1f:06:33:07:e0:28:7d:82:02:9c:da:74:ed:c5:e3:
86:0d:17:04:82:58:8c:09:da:7f:32:39:ac:21:24:
60:fe:d1:dd:32:da:98:28:7f:92:1a:ae:be:8b:84:
24:08:7f:2b:63:bd:8d:f6:d5:d2:b9:46:19:ab:4b:
d7:35:90:85:91:c7:38:ca:d2:d7:17:e8:67:84:81:
a7:55:cb:26:64:3e:70:cd:02:d9:72:e8:6f:6c:10:
a8:6e:6a:df:32:c4:c1:f3:12:26:95:6f:4a:20:da:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BC:C8:5F:10:6A:98:FB:04:AA:7C:F2:2F:4E:51:0C:E9:73:4D:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
X509v3 Authority Key Identifier:
keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.148.0/24
IPv6:
2602:fd1e::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:95:a6:a7:df:f9:02:4b:f1:57:65:4b:c9:f8:8c:79:50:6f:
1b:3c:5c:cd:ec:bd:12:dc:dc:19:9b:d2:b8:b0:3d:f1:89:c7:
c3:0f:c1:69:42:d6:ca:7e:4d:5d:9c:a1:93:5a:fa:33:c4:43:
42:08:7d:dd:c3:d9:7c:30:24:65:56:9c:71:fa:b2:f3:3d:89:
7e:19:0c:b5:27:86:41:6e:b8:1a:c1:b1:83:a8:c2:94:16:89:
b8:6b:e6:30:c8:d1:f9:e0:32:1a:37:38:29:f5:b8:cf:eb:a4:
9b:c6:b4:07:e6:5c:38:1a:f2:f5:c1:9f:5d:e6:9d:03:3b:42:
a9:01:31:22:01:a5:16:e1:bc:6a:f2:07:64:42:8c:31:32:50:
ea:a9:88:22:aa:e1:c5:67:fc:a9:67:52:68:4f:c9:6e:eb:cb:
f6:2e:d9:32:1a:ab:99:b0:26:e8:ab:1b:0f:4d:c3:4b:6b:d2:
df:bc:16:c7:aa:ba:0b:40:98:d4:e8:3c:00:79:8c:fb:b8:6c:
4a:1f:18:23:1b:b1:99:bd:97:d0:7d:24:b0:aa:34:3c:d3:9b:
2b:17:88:1f:20:a4:65:2d:6c:8a:83:e1:aa:be:f6:e3:4b:45:
66:4e:7e:14:27:a8:68:12:f5:17:89:7b:72:26:78:12:7b:8a:
ad:af:93:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:16 2025 by rpki-client