Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/f533168f-2bea-3c72-9cab-b9f24e61f615.roa
File: f533168f-2bea-3c72-9cab-b9f24e61f615.roa (raw, json)
Hash identifier: BGAJNrz/XJNZXsn9ixRfGySBX2aPuJt2oU7DzIt9RM8=
Subject key identifier: B0:CD:8B:C5:77:AC:67:EB:63:6D:69:1A:A9:47:88:4A:A1:C7:4A:DD
Certificate issuer: /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial: 010D0C9F43285848100A851A733A78B0FE6F37C0
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/f533168f-2bea-3c72-9cab-b9f24e61f615.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 14618
IP address blocks: 198.176.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:85:1a:73:3a:78:b0:fe:6f:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=fb9ca81f-80be-406f-816e-3686d3be744a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:47:98:e6:7d:a0:fe:a6:69:8c:71:f6:e2:
30:fd:e3:92:12:5a:66:53:b6:01:51:62:ac:6f:ff:
b9:bc:19:c2:2f:74:62:d5:ad:63:a9:1d:e7:c9:28:
55:c5:15:24:0c:e1:28:c3:82:22:fb:ba:98:63:b0:
29:8b:9f:74:dd:e8:f2:04:d2:9d:4d:20:fb:07:eb:
3a:79:33:c4:aa:f4:a9:5e:10:1b:04:48:af:a0:0c:
14:0b:31:ae:ad:f3:6e:f1:28:a7:a9:6d:2e:8b:ce:
ea:0f:03:d8:1a:05:7e:92:fd:9d:1a:3e:8e:53:aa:
d8:17:b3:fa:52:73:d1:06:0a:ee:29:f0:f0:09:8d:
72:2c:c4:91:a4:d0:af:bf:10:7f:16:1b:b2:c7:3c:
33:ff:fc:b8:d1:86:c6:de:16:62:9b:2d:fe:ce:88:
3d:02:13:ab:5c:e1:43:28:1b:52:14:2f:56:11:bf:
e0:d8:c3:47:66:2e:7d:7f:e4:c1:6f:6d:4f:62:bd:
ee:95:34:36:6c:82:62:16:a7:c1:27:52:da:22:06:
08:28:80:63:16:11:ea:33:82:04:6f:5f:17:cf:11:
83:83:18:73:5d:1d:80:e4:f4:5a:66:1e:fa:af:42:
e5:63:9b:40:46:4a:4c:13:3f:12:22:a1:e1:fa:68:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CD:8B:C5:77:AC:67:EB:63:6D:69:1A:A9:47:88:4A:A1:C7:4A:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/f533168f-2bea-3c72-9cab-b9f24e61f615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
X509v3 Authority Key Identifier:
keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.176.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c9:18:72:53:00:09:49:c5:6a:2b:b5:4c:6d:b2:98:bc:23:
08:5f:fe:6f:65:3b:93:74:3a:0a:a0:54:55:b4:d2:fd:5c:c4:
b6:fd:42:fe:91:c4:93:de:c0:a0:15:21:8f:ca:f7:fd:14:14:
16:cc:2c:bb:8c:5a:f8:68:7c:7e:90:44:d0:64:24:83:7f:ce:
de:d8:8b:ce:b5:d8:91:7d:5a:2d:d6:ed:7f:f5:c9:b3:4a:6f:
8e:a7:5f:78:95:d5:49:dd:32:dd:54:d7:b1:7a:4d:ad:0c:97:
f1:87:07:7e:09:2d:2b:6c:41:0b:40:71:9f:b5:3d:8a:33:15:
5a:06:48:59:86:ea:69:87:c3:54:23:c6:71:26:a2:0e:63:aa:
77:8c:40:31:ea:7e:12:50:f7:b1:ae:72:ae:8f:51:02:fa:14:
30:38:10:91:80:53:92:52:33:79:3a:14:da:80:09:8a:ea:9e:
18:01:d6:f8:9b:b3:33:ec:5f:80:9f:84:2c:6f:e8:14:09:ac:
d2:f3:fb:65:da:d1:e3:b1:ed:41:ed:29:23:e2:00:c8:ad:bf:
7a:95:85:96:e0:63:2f:44:3d:48:88:32:43:17:a7:70:d9:38:
f5:11:ce:9f:a4:25:c0:f7:42:ba:aa:94:1e:40:22:d5:b4:0e:
d5:b8:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:59:01 2025 by rpki-client