Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa
File: 98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa (raw, json)
Hash identifier: d5yq/0BMm39xKtXiqnQ2yy4sMSRkVszFQRGhu1Qn7i0=
Subject key identifier: 20:CF:71:66:63:CA:9B:F0:31:2C:F2:3D:59:D1:22:C6:8C:EA:91:68
Certificate issuer: /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial: 010D0C9F4328584871C0704CC7507BBD2F740B80
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 198.37.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:70:4c:c7:50:7b:bd:2f:74:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=64f8c445-656c-4b43-bf13-f9df1e1c9b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:cd:b1:d6:b3:c6:e8:fd:f5:ad:56:9a:26:
e4:ad:bc:60:77:78:08:96:9d:c4:16:75:90:0a:93:
0b:d7:53:9a:b9:45:4c:81:5d:bf:b1:84:62:49:93:
bc:3f:a2:11:08:6e:17:3f:a6:cd:07:c1:8e:06:6a:
83:c1:d7:17:b0:a8:84:f0:e1:6a:2b:37:50:aa:f3:
73:64:b6:a9:bc:0e:4b:21:75:51:db:5c:ae:99:04:
96:35:40:fe:cb:dd:98:67:40:76:ac:53:b2:17:ca:
5c:d5:dc:c3:77:bb:f8:47:ba:7a:e9:6f:82:d0:9b:
28:94:36:cf:4e:66:f8:61:b4:a6:92:a0:d2:ba:03:
59:5a:b2:e1:4f:15:77:3b:41:d9:ab:d6:e0:1b:70:
14:92:e9:e5:48:7f:a9:7d:25:76:0f:c5:65:69:31:
ad:6d:34:4f:cd:03:34:3f:c7:25:4a:e5:fe:96:f4:
e4:72:aa:bc:f8:46:a5:57:a5:3d:67:f3:2b:3d:5f:
7c:35:30:76:11:1c:5e:70:dc:f5:55:54:5d:28:e0:
d4:b1:d6:84:8f:6f:30:e0:f5:36:4e:93:6b:46:f0:
63:ca:b9:8f:6e:a3:34:85:b2:e5:75:0e:e2:94:0d:
14:2d:e6:9b:a8:f0:f5:3a:17:50:b1:c2:24:b7:85:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CF:71:66:63:CA:9B:F0:31:2C:F2:3D:59:D1:22:C6:8C:EA:91:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/98f3ab2d-e59b-3e39-9812-0e051f9d6e4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
X509v3 Authority Key Identifier:
keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.37.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:57:d0:f9:29:ba:18:7c:2c:98:47:b0:c4:6b:ae:03:8c:ca:
c2:dd:22:21:e5:ac:7d:79:8f:f1:d3:97:23:44:ca:99:1f:ea:
2e:52:5b:9b:30:3b:21:1e:74:a5:0c:25:2b:f2:eb:f9:48:ad:
17:c4:76:e4:56:bc:e1:bd:5e:2a:85:81:3e:48:4c:fb:cb:d3:
3e:be:05:5c:0d:d8:c2:f0:40:e5:7d:c3:6f:52:d9:1a:f4:76:
e7:d9:2e:3f:64:83:2d:5e:ac:e8:93:b0:4f:63:96:46:f3:d2:
6f:e2:a7:63:2e:55:8b:30:56:c5:c0:b0:56:c6:7d:90:3a:7d:
9d:96:7f:63:8d:ae:72:73:cd:8d:73:c5:45:98:e7:50:d3:6d:
3f:08:a3:52:88:f4:5c:94:43:dc:0b:22:03:fd:d7:9c:2d:c0:
a4:5a:20:75:de:0e:04:a7:c3:2f:0c:c2:44:b0:fc:7a:98:79:
ec:74:89:b1:a0:aa:aa:f5:c5:4b:43:f9:f8:a8:c8:08:76:b8:
14:30:fb:fd:11:5f:21:d6:cf:74:0e:b2:35:1b:c8:64:c3:e4:
fe:1d:55:0f:83:68:06:3c:f2:15:ab:ef:25:50:9e:3e:a1:a5:
7d:a6:20:52:e1:40:d6:82:dd:3e:da:0e:cf:00:12:01:ce:99:
bd:ce:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:35:23 2025 by rpki-client