Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa
File: d5f143af-ba0a-3780-a98d-6780498dc1dd.roa (raw, json)
Hash identifier: 97wY902HXFdYxWAPZ1zApTRGzIEswM+RmXIS7ks0e5U=
Subject key identifier: EE:38:DA:F2:DF:C8:FB:B1:6C:CF:B8:6D:D7:A4:B7:56:4D:73:71:B2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848907605B77F9D2694F179DBA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397243
IP address blocks: 198.133.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:05:b7:7f:9d:26:94:f1:79:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=445e2d8f-473a-4dc5-bc23-f79ed83c45c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:04:6b:16:97:c5:7e:99:ac:e3:ff:bb:be:
79:d4:4b:d9:22:06:57:89:d8:5a:e1:6d:cb:f7:98:
bf:f7:79:c8:cd:80:22:6d:3b:b8:28:c4:fd:ab:64:
11:54:4f:76:92:8e:fb:b3:8a:55:89:2f:1f:b5:aa:
2d:dc:26:05:4d:60:09:e4:1f:9a:69:22:91:0c:3b:
a2:6d:ae:2a:bc:a3:6d:52:84:51:09:28:05:4b:cd:
0b:32:4e:7f:88:b4:8c:fd:27:39:cb:d5:30:af:a5:
21:97:72:b1:c7:a5:03:44:0c:9b:ce:4b:ae:1f:d4:
4d:29:08:cc:59:85:ff:65:66:27:f8:f4:e7:ec:f3:
dc:a6:bd:de:51:b0:49:b0:f5:6c:7f:44:97:62:d3:
15:4a:31:b1:b8:f5:fa:b5:30:93:57:f8:1a:29:32:
cb:47:3c:bf:c8:aa:d8:88:a6:54:ae:0c:f2:f9:2a:
4e:d2:4c:ff:21:13:a2:dd:fe:9b:17:58:2b:c4:ee:
27:12:ad:47:8f:35:eb:d6:45:4a:c5:f3:e1:da:3a:
97:78:ca:20:b0:80:c5:7e:f5:79:cf:72:e6:95:62:
f6:f0:25:13:ea:98:02:eb:45:9e:28:d4:b4:83:db:
19:b0:ea:91:57:92:89:27:4c:60:d5:42:d9:a9:c2:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:38:DA:F2:DF:C8:FB:B1:6C:CF:B8:6D:D7:A4:B7:56:4D:73:71:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:6d:3f:c2:6c:88:bc:39:45:3a:64:84:9f:cd:ba:88:ec:ba:
d0:14:c1:25:eb:d9:72:fa:70:c7:17:5e:72:e8:3b:16:bf:a2:
f9:a6:48:50:97:7e:f2:c7:d0:43:e9:ed:0e:e7:34:90:4f:16:
e1:c5:90:ae:94:e7:a4:bd:89:d6:13:dd:ec:df:3c:7f:45:08:
5f:c2:57:7f:5c:f1:da:02:96:6f:90:5b:d3:49:d9:ce:93:89:
da:e3:4c:d7:83:92:ff:4a:6e:d5:75:5d:8c:3e:b9:17:ff:31:
ff:8b:48:3c:0d:e1:b0:4a:c3:8a:24:b0:d1:1e:da:46:79:ed:
23:08:a4:dd:e0:3c:4a:87:28:4b:06:18:4f:47:49:7a:ca:2d:
67:81:cc:bf:c0:7c:33:7d:d2:a6:05:e4:51:4a:2e:ce:c4:0b:
a7:0f:3d:df:a9:4e:79:d3:a3:e8:3b:44:b0:ec:09:e7:5c:d4:
91:ff:10:ba:9d:47:d5:5f:25:45:43:4d:44:26:b4:cc:8c:58:
d7:21:e6:c0:f3:9f:5e:32:d3:10:81:f3:59:d3:29:be:cb:0c:
41:07:a9:2c:e0:18:39:91:06:b2:84:1d:79:43:56:7d:8e:52:
10:c6:aa:87:12:af:70:77:13:5c:58:cb:c8:67:81:8b:dd:7f:
4c:2a:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:12 2025 by rpki-client