Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8cd087a-8464-3848-b254-b4db3c8391ac.roa
File: f8cd087a-8464-3848-b254-b4db3c8391ac.roa (raw, json)
Hash identifier: TlU58x9Z1ytk4sBjNVMuxGvilaEfGsrZnpIOJYZiGkU=
Subject key identifier: 33:CE:BA:3B:E0:99:E3:2B:4F:B4:97:5A:32:F2:06:BA:C5:65:01:5A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486265876B3C1C3397667C4580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8cd087a-8464-3848-b254-b4db3c8391ac.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 0
IP address blocks: 198.105.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:87:6b:3c:1c:33:97:66:7c:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=b112e0c5-a859-431b-80e9-718e6593bec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:3f:1d:c2:8d:ae:f8:90:6f:c2:69:1c:85:
1c:70:6d:bc:35:ce:08:bb:16:a3:4c:70:d4:1e:f1:
66:ac:2d:8b:ee:04:50:ad:54:52:29:68:f3:52:4c:
0a:57:9a:bc:3b:17:8f:07:bb:5f:7a:f1:1a:d3:57:
04:f8:03:53:d7:82:b4:5a:a7:05:42:aa:4c:a8:8e:
be:be:17:f2:9d:a8:0f:94:24:ce:eb:d3:3c:c9:54:
9a:78:f9:8f:8e:aa:0c:de:92:11:a6:18:64:cc:3f:
8c:c0:f8:40:37:cc:6f:39:c9:96:b3:ed:e8:a0:ea:
35:c7:f8:0d:bd:2e:bc:b2:c7:c6:55:e3:44:08:c1:
88:b4:da:e1:fb:56:11:d4:6a:3d:64:55:c6:51:2d:
12:da:7a:ef:58:d4:58:ce:07:d4:90:94:48:9e:36:
5a:81:9d:fb:7d:80:f4:3c:0e:fc:83:10:03:ed:11:
dd:ac:84:54:23:a5:d9:74:1e:38:8f:61:70:7d:3a:
3c:e4:db:64:5d:62:0c:ef:73:5f:99:0f:bd:9e:b8:
af:e6:52:ab:85:f9:ca:57:2b:72:b8:2f:6d:3b:12:
05:f5:26:87:1f:2b:86:b3:e0:2c:48:de:70:e2:d3:
94:64:25:91:2a:42:ec:e6:f4:83:b6:e9:60:7f:bc:
9e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CE:BA:3B:E0:99:E3:2B:4F:B4:97:5A:32:F2:06:BA:C5:65:01:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8cd087a-8464-3848-b254-b4db3c8391ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
198.105.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:3b:50:0e:b5:21:5c:ca:dd:b9:ae:10:bc:c9:0d:51:61:2f:
a9:42:f2:d0:be:e5:0a:b9:9c:90:f6:9b:ba:62:f1:0b:f3:a9:
52:b3:d3:00:e4:78:90:ce:19:d0:b1:22:42:67:49:71:2b:90:
0f:0b:25:f0:c5:70:b3:59:ea:5b:4a:32:8e:15:43:f2:83:47:
4a:a3:71:6d:77:c2:a3:02:20:eb:78:f2:41:8b:7f:c5:30:89:
3e:df:a2:21:44:61:e3:33:76:86:89:9c:54:23:f4:a8:69:70:
c8:f5:af:91:98:4f:7d:a0:31:59:ad:d1:a3:34:1d:f0:e7:34:
f6:3a:ff:86:78:0c:a1:0b:b7:d3:ba:d0:ce:73:d1:ce:ea:31:
41:31:a8:00:f2:3b:86:c2:6d:7b:f4:5e:6e:bf:85:2e:5f:2f:
83:64:69:7c:2d:de:47:99:6f:cf:f5:d6:98:1a:bc:4c:91:3d:
db:46:72:90:6b:a7:01:a6:ee:e1:0d:af:63:6a:45:a2:bc:9e:
fe:13:1d:d2:f6:2e:c1:6c:db:e1:16:e6:4e:fe:8b:68:59:e2:
73:f0:2c:35:04:ac:03:a5:ee:18:70:0c:45:81:de:e1:14:12:
f7:a0:e2:b5:eb:a1:8f:64:b8:f8:a6:f1:bd:1e:ad:7a:87:ec:
7e:1d:54:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:26 2025 by rpki-client