Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/6df3735a-1281-3c75-8e87-c48e2671c709.roa
File: 6df3735a-1281-3c75-8e87-c48e2671c709.roa (raw, json)
Hash identifier: Zza7CDTJc3uJT+9+QPYLYdtLsSw2Vj24ODGMXdlJ7M4=
Subject key identifier: 5A:AA:B9:70:68:F9:35:34:F8:15:D6:2F:02:07:D8:48:7C:7E:03:16
Certificate issuer: /CN=66367942-14b9-49ce-b2d4-9472107e8402
Certificate serial: 010D0C9F432858484C1021011F3E883E4BCC3C80
Authority key identifier: 75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/6df3735a-1281-3c75-8e87-c48e2671c709.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 53831
IP address blocks: 198.185.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:21:01:1f:3e:88:3e:4b:cc:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66367942-14b9-49ce-b2d4-9472107e8402
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=938db179-87de-4232-ad6e-e7b0fdaeac4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:84:fa:16:07:ce:6a:c6:28:e3:24:5c:46:
93:cb:d4:3b:23:e4:14:5b:52:bd:21:d8:93:17:66:
da:23:30:f4:26:49:e2:4f:88:fd:12:e3:0b:5e:33:
4a:dd:87:b4:3a:1f:86:f7:7d:66:4e:d1:05:7c:c3:
33:7b:24:2d:56:76:2a:23:27:91:c6:33:72:8e:43:
1e:0b:f5:58:b0:36:ea:24:fc:e7:20:6f:51:53:0a:
75:bb:5c:55:bd:6d:a4:5c:48:ef:ba:ca:cc:e7:65:
00:ee:e8:43:bb:05:8c:88:f4:9a:7e:1c:7e:3a:c5:
10:a2:ae:86:2c:45:71:51:35:cd:5c:f8:35:ea:37:
3b:da:0a:00:22:e4:e2:ff:bc:8d:64:5a:7f:90:72:
3f:43:a0:fe:c0:2d:ec:98:6d:49:21:7b:c1:3c:43:
2e:d0:fe:6c:f6:94:c8:39:1a:51:60:d5:a8:63:63:
c9:34:a8:9f:20:26:98:bf:ac:5e:00:30:54:26:76:
21:4c:7c:e1:ee:96:ab:8d:92:71:8b:d5:7d:05:19:
c2:4c:e6:a5:68:b5:ff:25:b5:5f:ec:2d:0e:76:29:
60:ff:30:fa:54:73:15:93:b3:d1:26:43:a7:be:1a:
60:ea:da:a1:12:95:12:d0:3a:f9:fd:28:a0:2b:17:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:B9:70:68:F9:35:34:F8:15:D6:2F:02:07:D8:48:7C:7E:03:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/6df3735a-1281-3c75-8e87-c48e2671c709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl
X509v3 Authority Key Identifier:
keyid:75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
sbgp-ipAddrBlock: critical
IPv4:
198.185.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:f5:79:e5:22:d6:07:46:85:6f:dc:8d:e1:38:b9:78:d5:06:
fa:7f:2d:64:5d:d5:2d:e0:0f:f4:83:32:fe:2c:2b:e1:06:19:
69:51:5b:7b:31:73:9e:4d:be:cc:f5:36:11:75:4a:f3:98:9c:
52:b8:00:26:8e:c5:b4:5e:9a:15:d7:fd:00:8b:05:49:8a:77:
9a:a7:15:86:3c:58:42:20:51:4e:f5:97:63:4c:22:9b:76:f7:
eb:8b:f6:a0:76:fb:63:a1:53:50:a4:4a:a1:80:f1:64:6b:4a:
a4:9b:26:e1:b8:85:26:d9:a7:3f:47:03:89:dd:42:7c:e1:c1:
d8:bf:18:8d:d0:47:56:f1:33:12:b4:9e:bc:6e:df:fc:1f:be:
59:9d:89:d7:0f:ba:f8:7f:29:10:88:f7:0b:a4:5f:2d:cf:2f:
e3:f8:d4:0f:34:18:f8:3d:bd:1a:00:b0:6b:cc:77:b4:fc:fc:
12:93:41:78:43:c7:20:80:5b:9f:48:a0:ff:18:6a:fd:77:42:
aa:d7:e0:c1:94:58:30:2d:77:f5:0b:5e:69:65:4f:e2:07:e4:
76:a7:77:3f:3e:cd:a0:96:9b:46:ae:e7:18:ea:26:bf:62:41:
c7:83:4d:17:5d:f8:4e:a0:4b:81:11:c4:1d:55:be:89:ab:42:
6e:df:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:00:43 2025 by rpki-client