Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa
File: 3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa (raw, json)
Hash identifier: sO3w1kj8/8OKxrffX4s4l8RZwqT1kHIkNnz7gZatbQg=
Subject key identifier: A3:BE:36:21:08:7B:C1:2C:40:EE:A1:D2:0C:DD:9A:CD:F8:BC:AC:DE
Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial: 010D0C9F432858481F653717161DC5A95018FC80
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 611
IP address blocks: 198.164.129.0/24 maxlen: 24
198.164.130.0/24 maxlen: 24
198.164.131.0/24 maxlen: 24
198.164.132.0/23 maxlen: 24
198.164.136.0/22 maxlen: 24
198.164.144.0/22 maxlen: 24
198.164.156.0/24 maxlen: 24
198.164.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:37:17:16:1d:c5:a9:50:18:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=53e6c8c9-e978-405f-8293-67d4c0d49a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:12:aa:b8:7b:19:3b:be:87:83:5d:af:23:
c3:cf:32:cc:8b:54:ac:7f:e0:4f:e7:61:24:6b:35:
b2:e4:59:e2:85:6f:94:e6:d7:b2:65:7f:4f:72:d4:
ae:6c:3d:a8:73:72:4c:40:93:04:bc:8e:5e:ad:1f:
ce:dc:79:39:ef:3f:35:19:4c:46:08:01:f6:27:48:
8e:ee:75:5a:2d:be:6a:4d:f5:aa:85:a3:ef:98:2f:
33:87:19:f8:7f:23:ef:fe:93:1d:16:a9:cf:f9:5d:
3d:4c:45:53:7e:3e:a1:ea:fb:61:83:4c:d7:cf:92:
b2:92:ca:a3:ba:5d:87:bd:73:9d:fe:ea:43:33:05:
fd:4b:29:4d:41:8f:83:5e:b0:cb:bd:71:80:48:e3:
19:ab:ff:24:b2:25:49:33:42:08:c6:3e:bb:3a:f9:
d9:a2:86:86:76:87:ac:fc:93:0d:b5:f2:56:ee:93:
00:2c:d0:4f:16:ab:f4:23:d3:5e:a6:dc:f7:f6:25:
45:83:b0:a8:a9:a9:67:61:24:d9:cf:97:24:7a:9b:
9c:d5:40:9d:99:4e:9e:2a:62:df:6d:ee:3d:fc:83:
ab:88:7f:d4:49:90:fc:9f:4a:49:74:55:22:39:77:
94:3b:3f:51:19:ed:be:80:93:c3:c4:62:c8:8b:9e:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BE:36:21:08:7B:C1:2C:40:EE:A1:D2:0C:DD:9A:CD:F8:BC:AC:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
X509v3 Authority Key Identifier:
keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.164.129.0-198.164.133.255
198.164.136.0/22
198.164.144.0/22
198.164.156.0/24
198.164.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:90:98:f5:58:15:ac:63:7d:b8:fb:b2:1a:f7:07:7b:27:c5:
e4:ea:8f:5d:57:e0:64:f9:0c:ff:52:a1:c2:77:80:ea:ad:23:
55:17:9f:7f:56:88:74:3b:f9:80:03:2f:3f:87:98:52:dc:9a:
6c:03:02:26:e2:3f:04:c0:69:5a:1f:7b:bd:22:d2:d1:6a:9d:
7d:64:d8:bf:22:64:3b:4b:da:48:e5:a2:14:ec:f2:62:f3:c1:
ab:de:86:2b:6e:50:41:87:61:90:8d:72:d0:5d:31:4b:a7:76:
07:bf:ab:ca:2a:87:f3:1c:81:95:d0:eb:a5:e2:ad:e6:66:9a:
22:39:39:33:a3:f6:0d:c0:2e:09:f1:ee:c7:8d:fd:f9:25:46:
46:15:70:e8:b7:70:38:e2:26:b1:55:a5:9a:95:ca:0e:55:cf:
7e:79:ce:78:4f:75:30:d8:5b:19:b0:57:f6:b0:58:9b:70:0a:
d6:5d:f1:4f:71:fc:23:ba:b0:c1:9d:20:7a:63:ae:b6:70:d0:
62:53:12:61:bd:88:88:98:37:86:c4:34:5a:88:8b:15:77:b3:
b1:16:34:05:70:b5:c2:19:78:ac:36:d3:40:b8:ec:1f:09:37:
89:c8:f0:15:40:b4:cc:16:36:10:e9:fc:fc:ab:5a:0b:43:63:
0e:f3:04:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:07 2025 by rpki-client