Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa
File: c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa (raw, json)
Hash identifier: gn7Sp+VuRzpd5/wVxg/Rr72WOAZbvkxtfYt6HkspZds=
Subject key identifier: 83:8C:2F:40:E9:57:D1:DD:8A:A8:C2:BC:4D:32:A2:E4:E6:A0:77:81
Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Certificate serial: 010D0C9F43285848451591E596E75B55DEA18980
Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16509
IP address blocks: 198.175.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:91:e5:96:e7:5b:55:de:a1:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=a7c6094f-33e6-4a53-8246-ac36291be2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:3e:50:b4:c6:6e:6a:02:28:b0:35:e0:d7:
67:02:96:1a:5b:dc:66:b7:0e:6b:66:2d:6a:bc:e3:
5f:b3:6d:11:b3:79:bd:f6:51:d8:9a:c6:a3:e4:d8:
bb:52:71:bb:d2:a9:df:91:f9:be:47:f2:13:14:d0:
66:62:86:10:40:9a:0a:25:40:f3:3f:ec:b6:2e:b8:
c7:52:56:1b:4a:d2:6a:e8:6d:f8:6f:82:41:c5:71:
d3:52:2f:f4:f3:38:45:02:f6:9d:9b:03:78:cf:01:
5b:85:b3:0a:85:a9:c2:09:50:0c:26:8c:39:5d:0a:
ea:31:d1:19:e6:84:07:4a:11:87:16:29:7f:79:ab:
5c:49:10:ba:27:d2:6b:d0:fe:8a:2b:57:42:37:4b:
b1:f2:87:af:d0:7f:f8:b9:ff:78:73:b6:57:e8:da:
0b:02:71:3f:1a:60:52:9a:85:d4:02:0b:61:30:88:
76:05:32:ee:7f:ad:1b:41:3b:c3:89:54:a2:8f:17:
fb:9e:62:45:f9:e6:ba:dd:ba:66:4b:03:83:ae:15:
f1:ff:b3:2d:51:31:c6:f4:d1:78:e1:c3:04:81:93:
c6:b1:4b:12:5f:bc:bf:91:ab:85:a7:b5:4c:17:36:
1d:2b:81:09:ef:cf:e2:dc:22:bc:07:36:a6:7a:aa:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:2F:40:E9:57:D1:DD:8A:A8:C2:BC:4D:32:A2:E4:E6:A0:77:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
X509v3 Authority Key Identifier:
keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
sbgp-ipAddrBlock: critical
IPv4:
198.175.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:9e:a7:85:c4:a2:27:d5:fa:af:47:b6:5f:0e:9d:36:0b:0c:
9b:8a:a2:88:3c:f6:d7:77:b4:2a:6b:72:b2:be:66:0e:23:5d:
84:6a:24:df:8e:ef:5d:23:a6:a6:6d:fc:5e:79:2b:d8:2c:0b:
c3:6a:a0:ad:ee:c8:41:63:c0:5b:47:7d:07:a0:24:ff:72:71:
3b:05:b6:1b:df:c7:6c:dd:4c:6a:5e:27:ec:57:ed:12:b9:cd:
d1:c0:7a:96:38:1a:02:97:99:0d:89:11:b5:10:e0:30:f1:07:
45:0e:59:da:b6:88:06:8f:32:0c:7f:86:b0:74:0f:d2:cb:e9:
2f:f4:f9:67:67:ae:6d:85:71:5a:17:c3:38:86:a8:15:98:b5:
67:46:71:54:ef:18:58:4f:7e:f4:e6:99:67:5b:45:d8:3c:d8:
35:77:98:8a:d9:77:f9:35:3f:41:46:0a:55:2e:55:e5:9f:fa:
bf:51:51:90:70:43:96:d1:dd:54:49:46:cc:46:f4:4e:e7:55:
37:ad:c5:d8:38:f6:a5:d8:8a:c6:98:0e:71:53:23:f0:d8:c9:
be:90:6d:4a:d1:ba:09:07:f5:2e:fb:89:6f:d3:63:48:41:7e:
67:9a:4a:f5:b6:09:25:9c:18:b7:6c:f1:ce:12:a7:c2:8c:bf:
2d:92:be:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:54 2025 by rpki-client