Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa
File: 0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa (raw, json)
Hash identifier: DXfKzjibMuykyTPDm0idQZW6oGFESQlsJXRMV1Ox2bs=
Subject key identifier: 0F:2C:72:E5:36:A1:D6:59:F9:26:A2:3D:79:B4:5C:B5:4C:3A:EE:E4
Certificate issuer: /CN=6431aabe-7ca9-4420-b394-80fd03294bc7
Certificate serial: 010D0C9F43285848302540B0BA577EAED9452300
Authority key identifier: 1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 393906
IP address blocks: 198.153.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:40:b0:ba:57:7e:ae:d9:45:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431aabe-7ca9-4420-b394-80fd03294bc7
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=5a7b16af-e430-45fc-990d-a999522186d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:60:3f:19:7f:84:d2:61:c2:c3:e6:14:fd:
bc:91:59:81:74:40:88:57:3e:f9:25:9d:2d:d6:1a:
26:e0:65:c1:ac:06:07:69:30:c5:ae:73:67:91:29:
59:67:57:6f:46:f8:78:12:b3:86:81:3e:fa:26:29:
d7:b0:3e:a5:9c:23:d2:cf:5e:a4:2d:78:56:3d:52:
2b:ea:10:90:ab:f7:f2:7d:f0:96:40:c7:be:28:98:
8f:e4:4a:aa:8e:d9:90:01:a1:3f:98:1a:84:55:e4:
ff:1b:88:77:dc:c9:13:cd:54:11:9d:be:49:ac:29:
8c:cf:29:69:98:8d:75:c9:e0:35:c2:33:ac:fe:60:
51:c5:9c:ae:41:e9:60:c7:34:0c:72:e0:6b:88:8a:
79:d8:6a:a7:8a:dc:2a:fc:06:5f:ec:d7:7e:1a:4c:
5f:d5:02:8f:e2:26:a6:95:e4:d9:d1:0f:5d:7e:e1:
3d:a0:34:63:a1:ba:5b:9f:70:31:6f:28:cf:f1:33:
ac:c2:ce:5a:68:c8:1b:e3:b8:7d:b4:23:f5:ea:3b:
9d:5d:13:d2:9c:1c:8b:25:df:d0:09:72:4d:cc:1f:
d6:4e:bd:28:47:bb:33:b0:c5:d8:9a:2d:ee:52:e8:
3e:6c:f6:d2:97:75:92:94:b0:11:11:38:00:85:1d:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2C:72:E5:36:A1:D6:59:F9:26:A2:3D:79:B4:5C:B5:4C:3A:EE:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl
X509v3 Authority Key Identifier:
keyid:1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.153.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:0e:18:95:ad:0e:ce:79:b7:6d:56:72:7a:63:89:1c:28:25:
c1:46:1b:8b:f4:06:e2:36:79:c7:85:15:1c:73:7e:90:14:8b:
e5:af:49:39:4c:d9:37:e7:a1:bf:53:82:69:62:11:12:39:6a:
a5:35:7c:c2:dd:fd:cd:9f:9c:36:66:d7:3d:aa:72:5d:b5:43:
ea:16:1b:86:20:fa:9a:9a:af:38:00:75:aa:e6:ac:9a:99:cc:
66:2a:d3:18:25:96:bd:f2:fa:ee:89:fc:2a:90:b3:ee:af:82:
ec:23:1e:61:f7:61:6e:a2:74:57:bd:05:d6:96:18:5f:b8:9a:
03:d2:d5:27:34:ba:20:9c:d4:36:95:f6:56:6e:b5:8d:c1:56:
7a:42:fc:b9:73:f7:85:a9:aa:56:bf:6e:a8:3f:8b:61:7b:7e:
ff:0b:29:0f:ad:2b:33:75:8f:44:4f:64:4a:9a:06:21:67:ea:
c1:86:b2:40:c8:aa:3f:0c:6e:8a:66:8c:a7:c3:f8:ef:33:d3:
99:22:1d:db:90:87:70:10:d0:93:8f:8f:c5:7c:49:e2:bd:8a:
07:04:a3:e4:2a:b1:e9:e1:0e:c3:5f:2c:54:15:b1:d9:3a:94:
db:4f:6c:db:e2:7d:47:ee:14:64:c1:da:eb:bd:89:71:5e:23:
05:d7:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:55 2025 by rpki-client