Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/46a07bce-d159-3940-9c4e-a7bf314f74a9.roa
File: 46a07bce-d159-3940-9c4e-a7bf314f74a9.roa (raw, json)
Hash identifier: EPNZlgPN5u++Vru2EmQwrPY5UUzLDS0yEi8NbiXzq6c=
Subject key identifier: F7:8A:E8:95:36:07:25:CF:A2:E1:1C:D0:DF:68:F0:DA:2E:BB:06:A7
Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial: 010D0C9F432858486265921290B9F08BD9B95C00
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/46a07bce-d159-3940-9c4e-a7bf314f74a9.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 198.169.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:92:12:90:b9:f0:8b:d9:b9:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=f1decc9b-3c7a-46d8-bbab-d6e4760a64dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:6e:77:ed:4f:a7:23:22:d4:ac:74:e8:e2:
1d:42:28:73:0c:31:ff:a1:e2:32:65:fd:7f:71:ab:
38:94:29:ed:b6:2e:ab:66:5a:fa:1d:35:2c:4e:b3:
48:31:21:89:a7:75:35:9a:48:57:c9:61:c8:73:7b:
c3:01:ef:8b:1e:1f:db:63:45:44:b0:47:9e:1f:45:
86:79:93:32:54:eb:43:6d:e0:e3:a2:e8:ee:3a:64:
89:37:a5:e1:a7:f8:32:f0:24:cb:10:74:5b:f4:ac:
39:6f:80:a9:ba:68:a8:2b:ae:b6:6f:72:85:e5:00:
17:02:d2:9a:98:94:c7:34:a7:7b:66:28:9d:28:4e:
4a:f4:9f:46:8d:98:c3:3a:92:16:20:a6:e2:61:76:
dd:7a:0f:75:0a:6d:b1:6b:0a:80:38:a6:0d:f3:cc:
a3:a7:af:48:30:15:cf:d4:bc:41:51:c6:62:c9:53:
56:b3:d3:be:77:ea:63:a1:b5:7e:e0:0e:64:e0:94:
43:c6:49:0e:20:c6:79:c9:82:54:d9:d1:17:91:41:
e6:f1:4e:4b:a8:4e:fb:1f:7b:b6:99:a8:08:83:d2:
70:b6:3e:da:96:54:d2:89:87:bb:b2:39:16:d2:db:
92:55:e0:22:ad:55:44:45:f2:66:5e:5e:76:f5:58:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8A:E8:95:36:07:25:CF:A2:E1:1C:D0:DF:68:F0:DA:2E:BB:06:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/46a07bce-d159-3940-9c4e-a7bf314f74a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
X509v3 Authority Key Identifier:
keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
sbgp-ipAddrBlock: critical
IPv4:
198.169.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:b3:0f:e7:e6:7a:66:70:7b:23:13:24:8c:eb:3f:4a:78:66:
38:cb:06:33:4c:29:5b:73:e9:12:c7:0e:e8:40:5b:fa:ee:fa:
9c:8f:ce:0d:cd:d2:c3:ba:9a:ce:d8:80:97:96:12:25:57:e7:
53:bb:14:1e:ec:6d:1a:5a:91:2f:43:95:8c:1c:e8:00:bf:af:
c2:f0:a7:5f:e5:c6:61:3b:13:63:e6:81:a4:bd:e2:29:6e:72:
d0:97:92:8e:0c:77:51:7e:c4:90:83:50:6a:c8:1c:13:02:24:
fb:1a:7a:0e:97:7d:f5:c3:bf:96:de:ec:1d:f7:2f:1a:1b:df:
e3:47:c5:6b:52:9f:8a:e0:e0:1b:f1:68:c2:f5:1f:b3:7d:c4:
8e:7b:1d:a0:54:1a:89:a7:04:5c:ef:a4:93:84:51:d9:94:49:
d5:b1:35:4a:45:fc:07:52:40:aa:66:af:de:43:e8:23:c0:31:
19:38:e8:9e:17:28:2e:0b:b6:1d:ea:80:cb:44:81:04:a9:62:
ec:b4:17:c0:3b:9f:48:ca:e8:6b:f6:1f:fa:e6:27:50:9d:34:
34:fd:1e:7d:40:2a:ff:8a:33:4c:6b:2d:a3:42:9a:48:3b:c7:
6a:26:04:26:0a:6a:a2:ee:86:d2:b1:dd:69:2e:ab:7c:44:40:
07:dc:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:28 2025 by rpki-client