Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa
File: e408070a-3d28-36e7-95b9-81f2a086b77c.roa (raw, json)
Hash identifier: HoHLI8pzDoNL625KThu4UwMjWvf4GVgjYf/ss/gGqhA=
Subject key identifier: C2:87:C5:64:AC:1C:EA:A4:C6:5C:E1:C1:BD:8D:15:F1:0F:C8:B1:7B
Certificate issuer: /CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec
Certificate serial: 010D0C9F432858481C9A7A195AF5370C7FB18260
Authority key identifier: 74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 399248
IP address blocks: 198.207.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:7a:19:5a:f5:37:0c:7f:b1:82:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=c977f3c4-0f0e-4799-8778-aa06c33e6582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:d8:22:9e:6a:5d:d5:b5:5f:4a:ee:44:ca:
61:9f:9f:17:57:85:8e:bd:1f:8b:22:60:7d:0c:2b:
e4:13:4b:5b:3b:92:50:37:2c:8f:9c:02:13:af:3b:
d7:1c:b7:ec:88:85:07:69:3e:3b:8c:7c:db:0a:a9:
2f:c6:e2:d7:ab:73:5b:14:a0:c5:bb:6e:09:45:a6:
98:2d:81:39:89:90:3f:1e:88:ad:d2:0b:c6:2f:1b:
11:a6:cc:53:76:cc:43:48:9b:47:40:a3:ff:3c:91:
f9:cb:6c:55:6d:2a:75:b9:d5:9e:18:53:a4:2c:cb:
a7:dd:59:98:85:a5:67:6a:60:93:94:f4:76:6a:d5:
b4:06:01:a6:75:55:18:6d:c1:e5:92:0e:f0:dc:40:
b5:97:46:9a:ea:04:3b:ef:dc:56:30:49:00:c0:97:
da:a3:75:9d:70:09:5c:56:9c:6d:d1:be:12:d2:74:
89:e9:1c:4e:8c:6b:41:37:c1:c7:cd:3b:9b:92:a9:
eb:5a:f9:84:12:ae:ca:4b:80:8d:22:ed:fa:3e:28:
cb:ca:fd:4d:a8:f6:c3:d0:a0:8a:46:bb:e2:6b:c4:
78:4d:f9:66:95:49:0d:84:85:e2:b9:6d:ed:a3:39:
9c:d1:e2:44:5c:22:29:c8:83:a3:5e:a9:cf:fc:08:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:87:C5:64:AC:1C:EA:A4:C6:5C:E1:C1:BD:8D:15:F1:0F:C8:B1:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.crl
X509v3 Authority Key Identifier:
keyid:74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer
sbgp-ipAddrBlock: critical
IPv4:
198.207.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:08:5e:7d:ac:5b:ef:27:1a:70:65:55:32:47:f4:28:25:dd:
ea:0c:ac:8a:cd:f1:eb:62:46:e9:e7:40:92:96:5b:f9:f3:7c:
0e:9e:67:5e:80:4a:14:ff:fd:c6:ee:22:35:e5:fa:30:4b:a7:
11:da:c0:5c:6c:bc:bd:2d:b3:8c:a4:7d:9e:d8:be:97:5d:1c:
5c:aa:7a:bb:95:ac:88:73:1e:86:7e:32:7d:f9:68:d9:c2:8b:
96:04:30:49:a5:c1:fd:65:93:66:1a:42:c1:44:df:ef:35:b3:
ae:ed:8a:5b:7f:4a:18:ca:6c:c1:f7:35:61:9e:bc:9f:82:2d:
bc:58:d3:06:38:65:24:dc:5c:4d:6e:3f:48:d2:1b:d8:8f:90:
80:79:e7:49:17:d9:ff:48:bb:52:49:cf:77:dc:3f:0f:33:8b:
21:40:81:be:71:5c:9e:30:a8:a3:2b:67:33:d2:a8:6e:e2:94:
5a:72:d0:f2:0b:33:ae:67:19:81:d8:b2:ee:50:58:06:1d:86:
22:0a:fd:06:53:82:f8:c0:3f:ed:c5:11:ee:69:33:7f:7b:e0:
f6:ee:05:75:66:ad:35:74:bc:91:d1:9e:8d:e9:f9:d4:40:31:
90:3a:30:fd:ea:e8:15:ff:ea:57:a2:b4:d6:88:b7:95:52:43:
33:af:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:17 2025 by rpki-client