Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/71cba0de-faaa-37b6-b08a-c73d06646a41.roa
File: 71cba0de-faaa-37b6-b08a-c73d06646a41.roa (raw, json)
Hash identifier: KNHUeazil+eD1vehS2ErHW8C2ooNopkxCfoYTyB+SFg=
Subject key identifier: 26:62:F4:94:6B:88:65:06:79:C6:4B:58:7E:69:30:85:F2:A4:AA:7A
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584863CB06419DAAF70DEF71AD80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/71cba0de-faaa-37b6-b08a-c73d06646a41.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 9009
IP address blocks: 198.145.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:06:41:9d:aa:f7:0d:ef:71:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=3cbfbea1-6fa9-4fd5-b067-bbb525e9b2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:e2:b3:7c:01:60:26:c1:12:fd:35:86:1c:
56:2e:d3:53:73:54:47:61:32:78:40:42:07:8d:c4:
ab:65:51:5b:ff:66:69:9d:31:c2:1b:6e:53:77:17:
23:0f:da:21:f3:7c:1e:5b:b3:ad:5c:88:08:a2:d4:
84:51:9a:47:b5:d1:8f:6c:64:67:13:b4:9e:36:09:
98:fa:50:5e:b4:af:2b:51:0a:5a:cd:d6:ba:5b:08:
ab:99:43:47:c4:84:74:f2:c4:9f:b5:c5:12:b2:cc:
be:34:5c:e5:72:e9:7e:26:4c:2e:73:4f:ce:9f:05:
b6:84:7c:dc:af:c8:d7:f2:6b:cb:72:e9:ff:99:55:
4b:78:a4:66:07:30:65:bc:d4:c1:29:76:82:ee:f1:
dd:95:2e:68:ee:0e:6c:70:3a:e2:e5:43:f3:e9:a2:
79:ae:6b:cc:8d:8e:24:1a:37:9e:4c:a8:00:cf:63:
f6:3a:be:d7:61:9c:b1:8e:6e:72:ec:8c:17:9e:a7:
db:47:cd:96:fe:2a:39:73:2b:2e:8d:5b:56:f0:f7:
7f:16:55:17:27:e4:b7:86:3b:86:b8:d6:d0:6a:2f:
5c:d8:22:e7:eb:9a:13:1c:d4:c5:b9:cf:23:57:61:
df:b1:e3:08:79:ee:a9:f7:36:fb:63:43:eb:6b:07:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:62:F4:94:6B:88:65:06:79:C6:4B:58:7E:69:30:85:F2:A4:AA:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/71cba0de-faaa-37b6-b08a-c73d06646a41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e4:3c:99:9b:d3:f3:d2:64:33:27:c1:82:bb:a6:19:48:65:e5:
be:6c:fa:82:af:87:09:52:d5:ac:f2:83:be:eb:6a:f3:4e:fa:
c4:45:85:fd:b0:53:e7:fd:9a:98:8a:c1:74:5c:8d:ad:87:f6:
d6:94:93:c4:7d:3a:d6:99:f6:44:60:e2:3a:ee:bb:a1:76:90:
15:fd:0e:e3:9e:fa:4f:7c:c4:b3:8c:73:06:00:e5:36:d9:ca:
ae:fe:1c:ef:a5:b1:59:aa:3a:f6:85:0c:0d:98:55:4a:76:92:
49:97:f4:d2:c7:fa:f4:d3:93:14:45:10:47:1c:77:d9:46:c0:
2d:f0:fd:77:61:81:c3:83:04:2d:b8:8a:98:44:f6:0e:3d:17:
f2:9c:91:cc:24:e3:da:ee:73:a9:ba:da:4d:44:8d:df:1d:00:
4c:22:05:3d:08:5a:da:ab:99:7d:79:a8:da:9e:ff:0a:9d:70:
96:42:6d:f7:af:81:6b:c6:29:cd:68:b8:f1:eb:7d:df:71:28:
87:82:36:bc:d5:70:57:2a:4a:92:73:25:65:bd:6e:98:32:04:
f9:5a:1b:da:3c:44:26:6e:79:d1:0f:97:da:4f:1b:e9:47:2b:
06:dd:59:64:d3:e8:ef:65:f5:c0:78:a8:48:77:4d:b9:ba:1e:
25:36:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:52 2025 by rpki-client