Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/1c38630e-ee48-363d-a8fb-1391a851331c.roa
File: 1c38630e-ee48-363d-a8fb-1391a851331c.roa (raw, json)
Hash identifier: 4WHJbhyLSKXc+2BYTKCozXSpkjoWbxys7zFFC7JD+yQ=
Subject key identifier: 70:81:47:18:16:7F:E2:89:8D:B6:73:FB:6C:A2:02:96:8F:F9:02:66
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F432858483F802B37F9876017F3DD02C0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/1c38630e-ee48-363d-a8fb-1391a851331c.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 174
IP address blocks: 198.67.7.0/24 maxlen: 24
198.67.43.0/24 maxlen: 24
198.68.171.0/24 maxlen: 24
204.119.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2b:37:f9:87:60:17:f3:dd:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=7ed73d9e-7eef-44ab-a54e-baaf01397098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:48:47:a2:c4:5e:72:e6:70:50:92:77:3f:
f7:37:06:2e:e8:a2:50:f5:51:b2:a2:50:5d:da:ad:
92:91:69:b5:f4:69:7c:77:8a:5a:09:9b:97:56:a9:
64:c5:b7:35:77:9a:d2:01:82:c7:6e:16:f8:33:bd:
6c:04:03:2f:0c:99:88:8a:06:b7:fd:29:c8:76:b0:
04:55:a5:ed:d5:f3:9e:00:6f:d2:73:c8:e5:d9:48:
8c:26:02:00:cf:df:98:aa:7c:53:ca:5f:13:06:22:
d5:e9:b2:3a:50:08:3c:1b:e6:3f:ba:86:d1:5c:fb:
ec:4b:ca:e5:e8:b5:c2:47:29:59:31:cc:4f:29:ce:
aa:9d:e3:86:72:a7:a0:c4:92:1f:59:99:ac:3c:8d:
35:7c:f7:89:a0:68:e0:38:d0:f0:b9:73:58:5c:b7:
3e:5b:c1:ac:b4:e4:2d:b5:5e:4c:76:3e:50:de:7a:
2b:0b:53:28:e6:69:29:38:76:78:9b:e2:0c:e3:31:
6d:5c:82:5b:7a:75:0f:f9:4d:da:3c:b5:21:aa:82:
0d:0a:42:97:7b:81:c9:e0:d5:2f:ac:88:17:7d:ef:
ac:87:e6:38:2c:61:0c:ad:f4:a7:da:53:6c:df:09:
bd:0c:6c:d7:a8:7b:01:0a:27:37:2a:c0:b8:ba:5e:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:81:47:18:16:7F:E2:89:8D:B6:73:FB:6C:A2:02:96:8F:F9:02:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/1c38630e-ee48-363d-a8fb-1391a851331c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.67.7.0/24
198.67.43.0/24
198.68.171.0/24
204.119.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:bf:00:74:f3:f3:5a:54:ad:2b:87:ee:23:96:ae:c2:07:4a:
d5:b2:56:e0:fb:e3:65:70:d7:cf:32:f2:1a:58:ef:3f:2f:bc:
25:28:3c:ab:4c:df:45:69:b9:dd:36:35:12:12:ac:5a:1f:62:
2a:06:e6:27:10:6c:90:72:a9:e1:17:a1:7e:a3:44:20:fd:df:
5d:22:6f:82:f7:24:cf:50:95:1d:b5:e2:1f:ea:36:86:f3:56:
2a:e0:e8:d7:c8:f5:a7:11:38:4b:18:ff:b8:84:11:83:52:a7:
50:b9:6f:c3:e5:46:3a:56:a1:27:04:e4:53:b3:17:98:c9:e7:
89:13:64:ef:57:bd:ff:99:3f:a2:ca:02:ba:72:b4:02:8f:3f:
53:57:13:6b:4e:87:c7:dd:c6:c8:cd:9b:e0:14:6b:6d:43:7f:
df:89:a4:d7:3b:2c:cd:9f:c2:3f:3b:df:f9:31:ee:f1:19:c6:
c4:fa:d2:5d:60:b0:86:f2:76:4a:52:de:c8:0b:2a:85:e7:88:
c2:f5:74:91:82:7f:03:b6:0b:15:ff:29:ac:bd:7c:45:cd:dc:
df:8a:34:f5:7b:77:e8:71:ec:41:af:69:4d:35:eb:85:69:7b:
02:3d:57:d6:90:ab:9b:72:69:a9:66:c4:77:21:1a:41:dd:d0:
fb:bb:24:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:39:10 2025 by rpki-client