Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa
File: a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa (raw, json)
Hash identifier: ghESYqM+UJCvSdibpFcgyNGPX9y5GyijlbTak219cis=
Subject key identifier: 45:AA:66:A1:22:B2:23:30:34:99:44:B8:C5:22:EE:3D:19:9D:E6:DA
Certificate issuer: /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial: 010D0C9F432858485E35AFB38C5C04E346A86620
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 14618
IP address blocks: 198.187.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:af:b3:8c:5c:04:e3:46:a8:66:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=ed09b0e0-bddc-4f0e-8fb1-47c076195af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:4c:0c:8d:b2:c1:8d:68:a1:45:f0:f5:09:
d5:ae:04:1c:96:99:b8:c4:61:08:ac:58:68:b5:af:
ac:40:29:43:fc:5c:e2:37:29:19:e3:1e:85:35:c5:
ea:10:9a:95:13:32:d1:5d:af:e1:92:78:eb:a9:2f:
f1:c7:35:56:e8:93:11:38:08:7e:fd:c3:cf:e4:62:
fd:c3:e4:a2:15:0f:bf:d8:2a:4f:60:fe:4e:9a:51:
04:9f:2c:0d:5e:e6:91:e7:79:86:6d:2d:2c:57:e9:
29:10:86:0e:a1:00:2b:c2:6e:31:9b:cb:19:bd:ab:
ef:3c:db:12:d9:f6:81:cd:8b:e7:34:87:1e:55:f0:
1b:8f:fd:2e:c5:65:59:05:c4:9f:91:54:03:9d:28:
2d:b7:8c:49:bd:57:33:47:30:06:9a:c6:6e:59:71:
6b:ae:53:d2:8c:96:a2:38:50:e8:20:1d:fc:05:1a:
c6:4a:73:b7:a8:fa:ff:9f:6d:4e:3c:f8:3c:c3:db:
fd:aa:ad:49:5a:78:35:82:54:16:65:4c:4a:90:9c:
44:2e:63:80:90:53:c7:ac:79:ee:54:6d:6b:8e:10:
25:b1:cb:ab:6d:c3:ad:9a:46:d1:8f:46:9d:78:21:
b4:fe:17:e2:c0:00:ba:93:e4:8d:f6:f3:08:12:c6:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AA:66:A1:22:B2:23:30:34:99:44:B8:C5:22:EE:3D:19:9D:E6:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
X509v3 Authority Key Identifier:
keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
sbgp-ipAddrBlock: critical
IPv4:
198.187.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:00:e7:50:1f:aa:bd:9f:7f:93:89:ac:b6:34:2d:d3:8f:76:
3c:34:28:42:cd:ec:cf:bf:70:27:ef:14:a1:bd:0b:69:c2:7f:
c5:85:b1:12:10:67:ad:e7:eb:9f:53:67:75:95:79:d0:ae:49:
e2:11:f1:ac:d4:5f:9e:a9:60:d2:c4:60:f4:2c:a7:9e:fe:68:
d5:86:84:37:7b:31:a1:c1:bb:09:e5:20:56:05:21:ee:1c:2f:
b6:24:f8:44:af:5e:b1:b4:84:0f:71:d2:f2:b7:4d:73:b9:e9:
bd:42:62:9b:56:88:1d:1c:e3:a3:69:d9:29:3d:6e:0d:7d:b6:
e1:c0:f5:36:4a:99:b4:c0:b0:86:a7:02:c8:93:52:2e:d5:2c:
e5:14:c2:59:a0:a3:27:27:4c:3b:46:52:30:7e:c2:1e:29:5e:
d1:ec:d2:28:b5:8e:ea:16:fb:3a:2d:09:31:a5:b6:b6:11:4b:
98:1a:04:1b:8b:fe:97:c1:69:3e:be:cd:82:32:da:6e:02:a3:
02:52:17:7f:20:04:d1:99:4c:94:8c:51:07:3e:72:93:91:a5:
3f:f7:3b:c4:9b:53:8f:59:b9:78:85:44:69:65:2f:ac:0a:18:
b9:f0:a3:cc:08:9b:12:64:de:c2:4e:11:8f:5f:4a:fc:7b:b2:
24:00:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:47 2025 by rpki-client