Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa
File: 04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa (raw, json)
Hash identifier: eT4OT2cU6/f+6lLRTMqo12D+Of1EcDFKeQfCFEd5PAM=
Subject key identifier: 97:43:BC:BB:CF:5E:99:8C:C6:B1:DF:12:F3:55:33:38:58:50:67:3F
Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial: 010D0C9F43285848748B1DF7462E59585C5F2400
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 395657
IP address blocks: 198.60.113.0/24 maxlen: 24
198.60.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1d:f7:46:2e:59:58:5c:5f:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=02ebed0b-aea9-4f31-9498-413d94649f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:41:67:a5:9f:7d:c2:48:c4:47:64:b4:33:
1a:bd:14:cd:00:a6:30:b9:07:a8:00:b5:5a:09:20:
d5:00:e3:c4:73:32:ff:a0:72:ad:da:93:be:cb:36:
03:b8:1e:cb:28:c9:a0:5d:15:ba:a3:9d:53:03:53:
46:1f:16:ef:1a:2e:21:00:e1:58:ed:88:3b:b7:cf:
36:fe:a4:68:33:53:4e:db:b1:f3:6b:66:4f:b3:03:
e2:d0:06:e1:76:de:23:c2:74:90:9e:fc:58:ce:d3:
4f:36:f1:db:d8:ec:d5:eb:6f:17:f2:01:bf:1c:39:
ba:c3:de:10:4a:0f:d0:d9:14:b4:24:1d:7a:d9:e8:
ef:22:47:7e:4d:e7:2a:fd:7f:76:ad:4b:ef:fd:67:
cf:a4:5d:73:09:ab:45:fe:6b:68:81:4c:97:e1:69:
2b:f4:07:56:19:86:02:b9:25:27:9a:70:9c:1c:c8:
7d:ef:c0:f9:f9:29:c9:6e:38:3c:44:96:85:07:fc:
dd:50:5d:18:69:a9:3d:99:38:3e:dd:1d:6a:61:00:
44:07:c2:28:b0:93:19:94:2c:09:82:b8:0f:28:8f:
2b:22:7e:bf:af:85:82:49:30:02:87:a5:52:62:95:
d9:de:38:9b:61:d6:e9:73:55:b7:60:d3:7b:f0:f4:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:43:BC:BB:CF:5E:99:8C:C6:B1:DF:12:F3:55:33:38:58:50:67:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
X509v3 Authority Key Identifier:
keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.60.113.0-198.60.114.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:ff:e3:04:70:bb:ed:93:b7:fd:78:2b:83:d4:f0:02:c7:20:
42:d2:a0:e0:05:03:a8:45:11:57:7d:b8:c4:85:0b:fe:54:7a:
f0:f6:1a:66:a5:dd:a8:e5:c5:f0:75:1f:ac:dd:d9:98:76:13:
44:8a:f9:59:ec:fe:82:0d:9b:92:b5:b5:6d:bf:05:91:7d:03:
6e:18:a3:e9:1b:de:6a:82:e9:1b:d2:1b:25:3b:2d:a8:2f:bc:
b9:2f:6b:ea:08:3e:c0:04:d0:4d:8c:02:1b:a1:b7:b5:e7:d9:
b2:d6:54:cb:fc:d4:1a:4b:a7:96:1e:14:e9:d1:9f:1d:bf:3c:
e7:c2:e6:e6:97:dc:a8:29:52:e2:c1:a9:1a:1d:97:f4:a0:12:
88:73:77:9a:7a:48:60:dd:23:65:76:ad:b2:8b:7c:8b:3f:a1:
51:ae:80:2d:70:41:b9:71:29:ba:e5:16:6b:3a:b9:89:29:d8:
42:ec:1e:27:ef:3d:58:48:19:22:88:48:d5:81:ca:26:0f:fc:
ac:05:ea:69:e3:f2:81:86:fe:b9:7d:a9:55:fe:53:aa:95:55:
2e:8a:a0:42:dc:6b:d1:29:0f:68:c6:0c:fe:b6:1c:c9:7f:19:
92:94:94:73:7a:63:75:3c:50:70:95:e3:4d:b7:49:a0:5d:f5:
bf:13:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:09:48 2025 by rpki-client