Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/43286a4b-a24d-381e-be5f-4712d31e0324.roa
File: 43286a4b-a24d-381e-be5f-4712d31e0324.roa (raw, json)
Hash identifier: lKAPy8V83bIPbCjdXgs6m3d6J9m8k9+/waJIU5RIm9o=
Subject key identifier: DC:66:08:DC:B9:4B:88:54:07:53:9B:62:88:60:CB:EB:9A:86:5E:EE
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F4328584882809B3E4C44E5CABE6C3AB0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/43286a4b-a24d-381e-be5f-4712d31e0324.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 12083
IP address blocks: 207.98.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9b:3e:4c:44:e5:ca:be:6c:3a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=f8b5e3b1-767c-4e2b-a652-e5de4644f792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:94:91:58:e5:59:65:2c:e7:0d:e1:ef:b6:
36:80:cc:8b:5e:14:04:ea:68:8a:f2:4c:8d:96:1e:
4f:8d:94:2a:a7:87:87:56:f4:b7:1d:52:32:be:4f:
81:03:49:fb:da:d1:02:04:70:47:08:a4:cc:ce:3f:
87:11:46:43:a3:4a:fe:b4:bc:e9:68:c0:59:46:f5:
78:d5:e4:6c:20:b7:00:ae:f6:22:00:5d:70:05:65:
71:c4:33:16:99:f3:fa:6a:5a:d2:34:6b:51:cd:48:
e8:a6:3b:1f:94:6d:54:63:08:03:27:27:c5:1d:73:
ca:fc:08:6e:a4:c4:5b:90:f7:aa:e7:72:24:fd:69:
f5:90:75:f3:bb:50:b7:a6:8f:c4:45:50:45:af:35:
3c:95:ba:5f:36:6a:06:e4:7e:d3:44:4e:79:45:17:
7e:b1:61:e4:d7:62:ec:bf:6e:7e:3f:47:62:03:5d:
0b:90:4d:12:40:75:ce:29:f6:b6:1a:d9:31:11:a6:
f5:89:c9:ad:0b:3b:5a:dc:48:6f:8f:0d:cd:47:f3:
15:29:12:af:0e:4a:08:8f:d3:38:66:54:07:bf:8a:
6d:b7:42:3c:b9:e8:ea:64:72:62:eb:6e:e0:45:22:
fe:93:5a:87:a1:af:45:71:7b:71:77:aa:cf:4c:73:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:08:DC:B9:4B:88:54:07:53:9B:62:88:60:CB:EB:9A:86:5E:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/43286a4b-a24d-381e-be5f-4712d31e0324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
207.98.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:ee:e8:02:78:1e:e4:5f:5f:4a:d4:fa:f2:6f:42:16:3d:cf:
b8:d1:d2:37:4f:40:ec:3e:f1:da:a2:9a:a5:b8:01:08:22:33:
1a:c1:21:b3:fb:81:ed:1a:0e:8d:24:e4:95:bf:09:73:29:a7:
a1:82:db:ff:67:21:40:db:32:9f:a9:9a:66:32:d1:68:83:8d:
3d:1e:87:cd:bb:7d:20:f7:ef:a5:b0:85:90:40:01:90:43:54:
0c:db:6b:89:c0:4c:ee:cb:1d:c0:32:de:b6:7c:67:6b:28:9f:
44:5e:66:21:62:d9:1b:80:27:a9:22:f9:27:1f:31:d0:b8:61:
ee:95:08:96:97:35:cb:e2:f4:08:ee:dc:eb:4f:51:e8:f2:b0:
8e:7d:68:a8:29:c6:2b:cd:9c:05:76:d2:5f:cc:5e:c5:07:5d:
2a:aa:c0:75:7e:10:64:cb:7e:fe:8e:37:27:d2:35:fa:8f:3a:
3f:32:ba:9c:b7:5d:2a:a7:94:bb:32:6b:a8:f9:3d:6b:52:9d:
db:da:69:29:fb:4e:79:7f:b3:3a:c4:b1:85:91:b0:ee:1b:52:
69:63:47:e3:67:c0:81:6a:cc:11:8a:ef:40:66:7a:58:f7:0f:
ec:26:60:74:a1:e8:a2:ca:92:23:83:e6:d4:19:ff:25:db:5a:
08:63:07:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:40:50 2025 by rpki-client