Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/52f78bf4-5efe-37b5-b10f-9e50d723a029.roa
File: 52f78bf4-5efe-37b5-b10f-9e50d723a029.roa (raw, json)
Hash identifier: dgTIQz7QPNSWJbk8B+iNTsITOIbHjr+M7n6sX6PqZnU=
Subject key identifier: 1D:3C:2B:70:2A:52:63:2B:D7:AE:B7:08:2E:AA:15:77:78:AE:09:6E
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F432858481C9A9154390FB0B2E6D30800
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/52f78bf4-5efe-37b5-b10f-9e50d723a029.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 7018
IP address blocks: 198.145.106.0/24 maxlen: 24
198.145.141.0/24 maxlen: 24
198.145.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:91:54:39:0f:b0:b2:e6:d3:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=81c48987-633c-4380-9ca9-3514aea25152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:67:a8:0e:1a:71:ab:67:0f:31:78:ec:9a:
0f:8b:4c:8b:d3:ba:26:78:64:9e:78:4b:48:07:cd:
f2:0b:29:25:80:99:1a:8b:58:07:bd:34:43:69:89:
f4:16:b8:b5:f2:72:4d:a4:50:4f:12:b9:9e:3a:a1:
61:e2:d3:84:d9:7f:30:c6:76:40:f8:37:25:fc:33:
64:e2:36:ce:c6:7c:80:58:9b:e5:dd:a1:97:66:bd:
19:e2:d4:3a:46:3c:81:f1:3f:ab:c9:fd:3d:b9:41:
3e:c0:cf:3b:c9:ad:31:94:78:1e:5c:41:df:ee:c8:
19:81:50:86:9d:da:8a:b6:6a:e7:0e:f4:e7:8d:6c:
31:7f:28:f4:fd:9b:11:a0:4f:43:f8:ba:16:e9:2a:
73:45:71:b1:c9:9c:13:68:aa:69:ae:f5:3a:14:f3:
dc:25:e1:48:7b:46:f6:4b:4a:71:59:eb:74:de:88:
9a:1d:b6:1c:66:0c:d4:95:fd:77:0b:5a:b6:d4:0e:
3e:c9:b2:a8:f3:da:bd:5c:27:46:1c:0e:44:c2:b8:
41:a3:5e:3b:bb:e2:63:91:3a:e7:a2:a6:b6:45:62:
94:1a:42:9c:bf:9a:6b:0d:15:57:d5:2c:cd:c2:5b:
57:41:e3:76:0e:b9:bb:7a:11:1d:2d:11:d3:cc:53:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:2B:70:2A:52:63:2B:D7:AE:B7:08:2E:AA:15:77:78:AE:09:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/52f78bf4-5efe-37b5-b10f-9e50d723a029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.106.0/24
198.145.141.0-198.145.143.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:63:9c:ad:11:96:6c:b8:88:98:38:75:9b:0c:e0:3e:a6:7b:
97:3c:c6:91:7d:b2:d0:1f:6e:dd:1b:62:7f:8f:da:f2:00:b5:
1e:c7:3b:7c:f2:ee:90:fa:9d:29:f7:49:7e:83:60:36:84:90:
13:63:b7:6c:01:e1:43:6e:6d:3d:a0:54:ec:2d:85:40:ff:38:
ac:86:65:75:3e:55:59:22:92:de:82:bd:29:4a:20:c4:7a:c8:
8c:03:2e:5a:70:78:fb:5f:95:7e:b9:c7:ed:3c:f3:9d:a4:5f:
66:2a:5d:91:e7:b2:31:da:0b:a6:f0:5a:0a:27:93:9d:ac:7c:
64:6a:bf:88:df:50:99:c6:36:bf:52:02:ba:e8:79:d3:36:19:
12:a3:bc:27:69:66:37:fb:f8:09:31:31:a4:0a:6e:78:bb:25:
ad:f5:d5:f6:af:22:a1:b5:33:4a:77:5d:6f:cf:fc:25:c8:fe:
05:a7:b7:b3:3c:92:b4:04:73:f9:eb:0d:d6:d4:20:ca:18:e7:
8b:25:e2:9b:7d:26:39:04:21:37:ce:93:83:be:e9:bf:24:0e:
fc:05:eb:92:21:55:0f:a1:c2:86:05:58:56:21:2c:f9:7c:5f:
43:6e:77:9b:3c:ad:06:2e:cb:2c:a9:62:3b:05:aa:87:36:11:
56:2b:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:03 2025 by rpki-client