Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa
File: 2f12a581-2028-3c4a-af0c-35b5904553d4.roa (raw, json)
Hash identifier: M1wPxTgQX6qtFNB5hDEYXATLADee1VAXWgd1jlLZe5c=
Subject key identifier: 05:EA:A9:BF:B1:FA:B4:73:84:90:A6:8E:9E:09:B9:DC:79:08:8C:8B
Certificate issuer: /CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f
Certificate serial: 010D0C9F432858484EDACC752028A87B642796C0
Authority key identifier: 38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 393316
IP address blocks: 198.169.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:cc:75:20:28:a8:7b:64:27:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=060844df-0acb-4e8d-9e89-c5db3de3d484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:5d:ea:f5:ce:a6:e0:ca:ff:61:f7:f7:58:
d0:e0:83:ff:f6:f1:8d:74:ee:22:f0:68:d1:f0:b6:
bb:c0:57:b5:92:4a:7f:c3:a0:8a:0d:66:4c:9b:32:
d6:d2:d1:40:6d:1a:88:ce:5a:bd:81:4a:9e:df:69:
68:44:4c:a4:78:db:0f:f8:c5:5c:f3:96:65:bc:e7:
eb:73:a3:f3:4f:c7:53:d0:9d:1f:22:00:6f:5c:22:
2d:9c:78:0e:9a:6b:93:41:01:5c:ac:e0:04:14:8f:
03:1d:f1:ff:21:c3:0e:ef:dd:73:0e:a1:0e:c0:c3:
93:eb:e9:5e:96:93:a1:ea:b1:c2:7f:ae:37:07:6e:
59:37:40:ba:e0:ed:da:71:c2:c3:d6:e6:aa:d0:1d:
f5:db:40:35:2e:4b:90:ba:90:6f:eb:1e:2c:31:82:
ff:c6:cd:3a:87:b0:95:52:16:d1:41:81:3e:e2:83:
7b:8e:dd:be:87:16:61:4e:84:01:f5:df:ba:13:83:
d4:4b:3b:57:52:5d:78:fd:1e:3b:1c:45:70:90:34:
66:40:46:bb:c2:f4:c4:0c:a6:d8:12:9a:59:eb:a2:
4a:34:34:0c:07:c3:e8:5f:50:26:11:d0:bf:5d:db:
2b:63:60:40:26:14:6b:ce:9c:06:8b:0e:cc:45:d0:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EA:A9:BF:B1:FA:B4:73:84:90:A6:8E:9E:09:B9:DC:79:08:8C:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl
X509v3 Authority Key Identifier:
keyid:38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.169.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:60:96:21:11:9d:b6:22:a6:f4:eb:97:a4:f9:fd:62:a1:93:
6d:44:72:ce:de:d3:a5:cb:7e:55:90:05:77:a5:86:ff:dd:6e:
84:52:43:9d:38:ec:35:f5:d7:e1:a1:b4:c2:ba:b9:8f:d1:5c:
4b:49:43:4f:b5:ab:27:7b:b4:43:37:e5:3a:de:22:3f:43:82:
48:99:42:73:9f:7d:9b:bb:f2:b6:80:07:df:e3:b5:f2:b6:8a:
c7:28:6a:a3:2a:b7:ed:58:60:53:31:07:b7:85:b5:98:ec:43:
12:2c:2d:9c:46:db:ad:c8:fe:96:c7:df:85:a9:90:7a:47:f8:
32:c5:4a:16:ea:cf:ef:ff:5d:c0:35:f1:9f:60:43:8c:0d:ce:
bb:5c:75:f8:9e:0b:3c:2c:09:95:18:ef:0b:7a:48:fb:f3:a9:
6a:db:c0:46:9b:94:25:29:bb:46:06:6b:3d:97:c7:39:01:cd:
8b:80:c0:cc:cc:50:3c:82:c5:20:42:48:5e:63:5e:de:9e:fa:
26:54:8f:36:c3:ab:ad:fb:e6:09:4e:49:27:1c:5d:3e:3c:c3:
e5:8e:65:c5:63:9e:52:66:0e:07:32:37:32:51:70:8b:11:db:
ad:60:d2:6e:5a:6c:f9:6f:1c:79:e3:1d:36:97:3f:9d:dd:8b:
af:71:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:45:29 2025 by rpki-client