Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa
File: 40adc3e1-1982-3811-9bd9-58e5849782e8.roa (raw, json)
Hash identifier: ZIofvlBlbvu9MqEFQXjIQsVOnT1ZlG1F8TT95s0zjjU=
Subject key identifier: 2D:0B:37:0C:13:C1:2C:CE:79:EC:9F:BA:FA:1D:C1:40:CE:66:79:F1
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F432858486EF5B94A8113F5D4339DAC80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 9009
IP address blocks: 198.145.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:b9:4a:81:13:f5:d4:33:9d:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=c9f20f91-a5e8-4e96-b3b4-c30c2898527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fc:52:5f:6a:05:ec:aa:01:2f:b0:39:d4:44:
22:2c:dd:d5:18:16:34:e5:96:bb:c5:18:bb:9a:ef:
39:8e:d3:b3:2e:5c:5e:59:0c:6b:8c:58:57:77:dd:
8e:ed:89:a6:de:77:90:6b:2f:e9:29:52:b6:82:73:
5d:3b:ae:07:82:3b:2d:f0:59:38:78:d4:0f:90:a0:
db:ad:fa:9b:1b:82:8f:23:5a:99:5b:fe:e2:5e:92:
b7:7b:a6:f3:34:4c:f6:18:ee:25:39:0b:5b:58:98:
49:21:d3:39:5f:50:d4:9b:9d:4b:9a:ea:5e:ba:cf:
f8:9f:47:91:18:2c:f7:a4:f3:76:66:d6:80:1f:d8:
ee:c0:d4:6c:8d:ea:3a:15:d4:98:30:b5:c1:73:b0:
61:3a:71:15:35:e9:f8:0f:c2:38:c2:5a:b9:9f:31:
a0:07:8e:dd:3e:32:8e:02:d0:b0:eb:30:08:8f:cd:
6b:3b:31:e8:0e:5c:80:d2:25:4e:43:96:45:d9:a5:
7b:de:55:15:95:38:f1:da:17:ba:72:af:87:21:9d:
01:c6:a7:48:32:33:29:50:4b:36:87:a6:a4:eb:71:
64:a3:a9:15:71:17:8c:c4:31:9e:c5:5a:cd:14:3f:
ce:5b:c6:df:01:88:c6:7e:01:36:3f:70:df:50:f1:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0B:37:0C:13:C1:2C:CE:79:EC:9F:BA:FA:1D:C1:40:CE:66:79:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:c9:a8:ae:fd:8a:68:5e:65:59:47:8f:bd:ea:f1:2e:a9:08:
65:99:de:e3:50:d2:b3:c8:5e:8d:1a:c7:c6:f9:dc:b1:31:26:
3c:e9:71:1f:dc:e3:a1:3f:9f:69:45:f9:3f:2d:6c:35:cf:6a:
f6:83:3e:ea:3d:30:76:7f:46:7f:6d:d9:ce:49:78:d4:66:9a:
ff:a7:4f:8c:33:cd:7a:45:f9:a4:24:e0:66:1a:bf:62:90:10:
e4:6b:f0:c8:b4:1c:c9:9f:13:2a:27:cf:5b:2d:41:01:4a:23:
c8:91:a8:c9:85:7c:77:bb:49:92:51:21:fd:d9:8a:9e:c0:2c:
60:cb:d7:a0:f1:8c:c2:45:38:09:68:f4:c9:e1:4c:cb:b4:b8:
ff:5f:0d:ed:4d:1a:b0:15:8f:21:a6:47:6e:66:81:ee:a3:10:
33:f6:27:c0:e9:98:f9:c0:8d:6b:9f:83:a4:93:ca:de:34:ff:
74:20:0a:37:27:e9:92:40:a4:7c:7d:a1:7b:e8:f7:e9:5e:0f:
a9:3b:27:37:5e:c1:dc:89:59:e7:ba:58:de:37:88:cd:43:e1:
68:7d:f4:17:16:4b:99:ec:7d:32:96:ef:18:aa:ac:23:a7:37:
2d:11:dd:b2:ce:46:21:76:0e:32:a6:e2:d2:28:73:06:d4:b4:
3f:53:22:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:44:13 2025 by rpki-client