Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa
File: cb74f0af-7659-30b1-9411-47e725d27122.roa (raw, json)
Hash identifier: R1rxj+bShXcXLzfQFLxXm/nF/fk28lgoDjScNU6ienM=
Subject key identifier: 9E:66:62:E4:56:FD:02:6B:1A:39:D7:AD:D5:2E:95:29:46:36:13:92
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F432858483F802B4FD4A60E59F761E6C0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 174
IP address blocks: 198.67.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2b:4f:d4:a6:0e:59:f7:61:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=42419b4c-ee3c-4ccc-9416-db785055cac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:b4:7e:b9:cc:a2:7b:10:cb:b1:68:f4:a2:
58:35:af:73:9c:cd:7b:56:3c:4c:84:d3:55:97:34:
15:4f:65:9b:f1:3b:28:ca:44:05:83:ae:58:e2:0f:
7b:df:c5:e4:64:44:7b:7d:3e:df:c8:f8:f2:32:4f:
b7:05:ab:1c:cf:a8:c6:8b:2a:08:a6:a1:cf:4e:ed:
7e:3c:fc:df:7d:64:79:5e:c3:92:e8:2c:40:16:e9:
c3:b1:69:7a:4f:c3:65:86:ce:c5:cb:0b:15:87:5b:
d1:eb:08:3b:3a:68:41:30:90:d2:17:bf:79:d4:e0:
bc:dc:e5:01:18:58:b4:63:ce:60:9b:fd:7b:00:ec:
cb:3a:c1:6e:15:12:be:b6:d7:86:12:b6:cb:a2:36:
b6:4d:3b:03:1a:5c:74:48:96:f7:e7:c8:44:4b:53:
94:ee:d5:06:f9:db:32:45:ad:ff:0b:f0:ce:87:3c:
34:11:aa:47:19:88:70:83:94:58:a0:ba:cf:a5:3b:
e2:f3:53:37:39:4f:fc:16:1a:82:1c:29:83:11:71:
ac:96:c6:b3:83:48:bd:4a:9a:4f:05:d2:bf:d0:83:
eb:54:29:e8:e9:2c:20:c6:9c:2a:26:cb:5f:75:af:
da:1a:14:1d:e2:ce:a5:37:9d:26:b8:b1:d0:f6:55:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:66:62:E4:56:FD:02:6B:1A:39:D7:AD:D5:2E:95:29:46:36:13:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.67.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:96:99:32:2e:36:15:88:3a:d5:7f:d0:43:c6:29:c9:b7:a6:
c5:99:09:8e:a8:08:6c:53:4a:71:fc:8b:57:94:6e:15:ee:b1:
bd:3b:8b:66:32:de:94:62:0e:4c:47:8b:a0:2c:c9:69:81:2b:
1f:4d:9c:31:2b:ef:5d:47:09:43:dc:10:ec:4b:8d:62:1c:83:
ce:94:1a:3f:e0:38:9c:dd:3a:8f:7d:46:49:7d:eb:d8:7e:4d:
ac:d9:d2:b5:7c:2f:6b:64:e7:54:7c:49:a9:5d:9a:a0:b1:e8:
57:13:da:c9:16:0a:b1:49:9c:0b:b1:5e:2a:ef:59:1e:89:9b:
f7:3f:b0:c2:c6:9b:c9:e8:c9:d3:0e:3e:b5:ea:3f:df:d0:8d:
f3:82:75:2c:9c:da:f9:8b:cb:8e:c2:e9:2a:29:23:5d:4f:24:
2f:66:37:eb:09:df:d6:fc:07:ba:18:ab:d2:67:c7:78:a2:6a:
d1:79:43:fb:aa:4e:ef:b9:3f:ab:e8:9e:82:72:d5:09:ca:57:
61:d7:24:02:55:9f:df:5b:2a:26:09:68:60:c5:ed:8f:c3:72:
0b:c2:d2:16:36:fd:12:f6:07:d5:13:7e:24:00:3a:47:4c:1d:
79:fc:2f:69:50:f6:1b:e0:59:75:35:2f:b1:2a:15:01:06:3b:
de:92:7b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:20:23 2025 by rpki-client