Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa
File: b2ed4966-d792-34c7-806d-aaa85e042841.roa (raw, json)
Hash identifier: EwXTIMCXCwzSAdX9qKyjV6Xe1zkpBqiQwsjaN1XAm14=
Subject key identifier: EF:98:A9:73:38:1F:92:42:84:D5:82:50:9F:46:0F:A0:21:1E:57:E0
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848265FEBB19CB2E5E2459E5100
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 62468
IP address blocks: 198.44.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:eb:b1:9c:b2:e5:e2:45:9e:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=05b74d1c-af93-4da5-88f9-24aafc908f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5f:fb:33:74:17:ee:36:04:98:e5:57:20:ef:
9e:5f:82:9a:a7:08:07:e5:0e:58:3a:6c:fc:d9:75:
9c:82:78:b1:38:9d:9e:26:6b:87:ff:38:57:92:8d:
72:ba:1e:9d:fd:e2:92:cd:e5:82:44:cc:01:e1:89:
b4:79:5f:e6:b6:b5:07:68:48:11:f8:6c:3e:8d:eb:
53:c7:b8:08:81:d7:90:36:76:9d:38:54:82:6e:77:
e1:7a:68:d4:3b:98:ea:49:07:83:34:cd:ac:38:88:
14:54:04:73:a4:9f:63:40:26:58:2d:ba:c3:ed:b8:
51:9f:3c:4b:68:a1:94:66:8a:ae:d3:e7:56:bf:80:
f3:df:0c:bb:c1:0a:87:07:40:5c:0f:d1:da:b0:1c:
60:86:ed:08:e3:6b:8b:a0:d8:b4:a6:6f:20:50:00:
a7:54:53:67:22:ca:74:34:f7:e2:46:4c:19:37:61:
f7:15:e0:68:07:5b:19:e5:61:69:74:79:33:bc:31:
1a:82:45:32:9a:8e:e1:a9:6e:64:5c:af:04:be:ce:
03:65:69:fa:29:1d:30:a5:90:e7:84:6c:76:69:96:
ea:29:89:df:e5:5f:82:7f:70:77:1f:03:42:96:7d:
96:b2:29:1e:15:03:b6:32:50:d5:b9:6d:3c:af:19:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:A9:73:38:1F:92:42:84:D5:82:50:9F:46:0F:A0:21:1E:57:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:80:2c:e4:07:14:31:f4:dc:01:1f:77:dd:94:9d:cd:22:17:
c8:b5:de:25:46:7a:1b:b3:6f:e9:8e:6e:75:f5:8b:34:68:e6:
00:e1:f6:52:d0:e6:09:7b:24:37:9c:d4:e1:b9:9e:67:92:e4:
44:e8:7d:ad:5a:a7:06:10:47:b4:ba:97:a0:25:22:1f:7e:4d:
dc:1c:13:e1:52:68:aa:ab:27:48:b9:3f:e1:e7:91:6c:46:51:
4c:21:1c:b7:b3:5b:82:cc:1c:47:dd:83:e3:1c:55:35:7b:e5:
88:7c:ae:57:10:93:e3:97:59:6c:4c:88:85:fa:4f:2b:b2:7a:
04:8c:64:6f:a8:30:82:c2:23:da:9e:a9:6d:23:04:a2:54:52:
ae:32:1c:0c:77:b0:53:7d:90:d4:ea:ab:be:56:dd:77:c0:f8:
a1:72:c1:cd:15:2a:5c:ee:b3:3e:9b:eb:a9:41:6c:1f:22:ac:
e5:52:3d:f4:67:43:da:c0:8b:f0:cb:a2:85:69:a2:23:d4:9c:
a1:28:57:2a:b7:58:45:a8:5f:d4:d7:6f:cb:40:ee:7a:be:20:
ab:54:65:ef:c6:df:d8:db:56:d6:ab:70:f9:43:7e:01:34:ae:
15:4e:ad:57:47:1e:8b:b4:85:1a:84:43:8e:2e:1a:85:1c:8e:
e7:5e:9c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:53 2025 by rpki-client