Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa
File: 643d361b-c7bb-38de-aa52-f1c332bae5b9.roa (raw, json)
Hash identifier: CMVFb+kyz8wDVNLQJL4mFa71zRnDy06P0VgqkVZAqJo=
Subject key identifier: CB:DD:03:27:64:29:2D:73:76:A7:FF:51:C2:4C:96:08:35:0A:56:30
Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial: 010D0C9F432858488AE0A734423373C5D653E2C0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 109
IP address blocks: 198.135.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a7:34:42:33:73:c5:d6:53:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=e30857f9-234f-4a6f-a1db-05c3d6538fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4b:a2:52:19:22:db:f8:82:94:2d:b5:df:70:
a0:ae:0e:f9:8e:4f:f7:ef:ad:bd:3c:ef:b6:47:42:
d4:c9:20:6c:7c:60:64:bc:b1:af:eb:1e:e4:8e:38:
1c:5d:e8:c2:1c:fc:79:ff:cf:11:46:64:6e:8b:25:
eb:1f:5b:af:70:db:6f:83:c7:99:46:14:e8:93:30:
99:5f:bb:de:06:e2:ce:79:30:64:69:bf:47:0a:b5:
a7:b2:c3:f7:ec:c7:2d:ce:c4:bf:b4:10:f8:e0:b5:
04:30:b1:b6:48:b0:93:75:8f:db:1e:62:79:d4:15:
b4:11:81:a6:c1:0e:84:d2:5b:31:d2:a4:48:95:c2:
04:31:b5:80:68:75:91:40:34:8f:c6:b9:0c:ed:a5:
dd:d3:19:9b:50:dc:0a:48:3f:9d:75:3a:bf:50:14:
e5:bf:ab:08:ac:a8:0c:e7:8a:52:d2:f7:f3:e6:9c:
2d:22:0d:b0:f5:53:31:0b:60:fe:33:d0:63:57:c9:
07:c0:f1:ed:08:a9:01:49:9e:8c:91:00:ed:c3:7a:
fd:fa:11:25:7e:dd:67:0e:72:a6:49:7d:ef:a1:19:
a0:09:68:71:75:dc:55:b7:9b:b6:c3:c1:4d:77:cb:
58:ee:70:dc:6c:c9:90:6b:c5:20:64:a7:70:30:7b:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:03:27:64:29:2D:73:76:A7:FF:51:C2:4C:96:08:35:0A:56:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
X509v3 Authority Key Identifier:
keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.135.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:3f:f3:c6:c8:e3:d8:15:f9:8d:0a:41:5f:75:04:95:fd:22:
78:c0:4f:4a:24:4f:9e:8f:02:4f:10:14:93:a3:7d:f6:e4:bf:
21:17:6c:23:36:8c:71:0e:71:7e:09:9f:ef:c3:d8:ba:f9:eb:
f4:10:b6:82:78:89:83:b4:df:ae:2e:b8:dd:e0:c3:f4:f4:90:
4b:b4:95:36:d6:a4:c1:3c:68:78:08:10:a4:01:f9:4b:17:0b:
63:f0:e0:40:c9:6b:c6:8a:6c:5f:2b:78:d7:15:fc:ea:34:37:
a9:12:bc:eb:da:7c:5d:db:45:8e:0d:72:52:96:4e:e5:09:70:
03:86:cd:0c:f7:7b:0c:99:fd:b8:95:84:78:31:d5:e5:d4:0f:
56:d2:a7:6b:9a:27:b3:d6:53:bd:a3:26:d1:02:2e:36:da:11:
71:21:b9:9b:f9:64:9d:80:d2:38:de:45:a2:65:74:4a:a2:5b:
61:54:ba:5b:3e:e8:f8:3f:1f:b3:50:f0:24:84:6e:8c:2e:04:
76:43:73:f2:91:18:62:b5:02:d2:75:33:86:e5:61:9e:f3:c3:
af:4a:44:44:af:54:7e:c5:f3:e5:1f:29:ff:e7:36:a7:f2:69:
58:72:e2:73:e7:68:9b:03:d4:8d:f3:4f:fd:2f:90:49:01:28:
cb:73:39:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:24 2025 by rpki-client