Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa
File: bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa (raw, json)
Hash identifier: G90vIM0TwKXMjoP39wvynLy8vHh0KWppAYdEQpNBqgs=
Subject key identifier: 0E:BC:9E:9A:A7:68:C5:2E:CC:FE:8D:32:E2:D7:7F:76:55:05:F4:09
Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae
Certificate serial: 010D0C9F4328584819CFE356383B3CB582F5B120
Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 198.51.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e3:56:38:3b:3c:b5:82:f5:b1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=2dbd3c25-b5b9-4013-b103-25728a6f5f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:fb:ea:7f:52:3f:5b:23:15:2a:6d:e0:9b:
a3:da:d8:47:12:f0:30:5e:35:85:3b:b5:32:a3:e7:
2d:94:6c:6e:91:ec:14:5f:6e:11:d3:d9:de:3d:61:
81:eb:20:04:26:9b:88:ea:a6:a0:d3:82:25:9f:ad:
a1:55:48:69:04:b2:ca:32:e4:20:07:0a:26:96:dd:
15:c9:99:73:eb:45:e9:c6:cb:fa:88:4f:66:67:31:
56:37:e6:b8:59:31:df:34:23:1c:f7:52:37:44:9d:
3c:e9:09:93:86:0b:64:04:28:1d:8c:76:76:d6:73:
c5:67:10:b8:2d:38:0f:da:1b:39:82:75:aa:c0:08:
5f:6e:ab:1f:0a:eb:13:97:ff:2c:26:ed:6a:e3:ca:
c9:08:7f:cc:16:54:79:e8:d9:7d:0e:6a:cd:8a:dd:
f3:66:b1:2a:8d:4e:7a:97:7b:e6:c7:23:75:5e:bf:
b1:da:ad:74:0f:d2:dc:db:b1:16:a5:5d:05:77:ba:
12:a9:57:bd:7d:d1:63:fa:f3:9e:63:a3:bf:24:ae:
56:87:b6:19:be:e4:89:30:fe:94:bb:57:0e:4d:10:
11:13:1b:21:0d:8f:99:b7:04:3c:0f:ce:0a:5d:e9:
65:ed:01:2d:de:07:a9:41:0a:82:24:cf:b7:9c:d9:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BC:9E:9A:A7:68:C5:2E:CC:FE:8D:32:E2:D7:7F:76:55:05:F4:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl
X509v3 Authority Key Identifier:
keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.51.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:4a:ae:9e:1b:ff:f5:68:08:35:c1:c3:7d:df:fc:d6:f5:f8:
c9:fd:64:8e:29:db:f4:9b:8e:69:96:14:e2:50:05:97:59:18:
4a:83:36:6a:9c:11:be:e3:9a:81:53:ad:33:a8:65:d2:78:80:
dd:36:62:5a:5a:25:c0:1e:57:7e:02:9e:7c:57:bc:a5:36:34:
45:ba:c3:0f:1c:bf:3a:ba:b0:16:d3:65:06:82:5b:92:34:f5:
1c:b4:a5:22:c4:68:f7:5d:a6:50:1c:0e:c4:d8:19:ca:54:19:
b4:c2:f3:79:d7:26:86:96:ed:a9:35:8a:0e:a1:6d:f4:b3:86:
fa:83:52:d7:c2:f0:75:8b:c0:ac:e6:c6:9e:40:70:dc:d3:d2:
4e:d1:71:ed:b8:0a:c4:73:c5:d7:d5:37:6b:4f:0c:4c:0f:35:
8a:32:90:84:5b:8a:ad:27:98:19:93:90:9c:d1:64:00:47:0a:
59:b2:13:ad:5f:a4:a5:35:1a:7f:4a:16:ce:70:35:b3:1f:a6:
ee:7b:30:58:47:9b:f1:5c:93:6f:05:37:b1:14:3c:f8:ba:9f:
bd:0b:80:fb:fe:03:91:01:52:c5:65:d2:fd:7f:f3:03:36:fd:
84:4e:1b:4c:09:d7:48:3a:3a:e7:d1:5e:4c:39:cb:36:cf:fa:
70:af:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:41 2025 by rpki-client