Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa
File: 5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa (raw, json)
Hash identifier: vGmls5NFISbR/EaB/nUzOWI4t+DSMdhFdckafyebYSU=
Subject key identifier: 4F:81:BD:7F:69:EB:F2:DF:BC:C4:EE:8C:26:D8:E4:22:29:76:AA:6F
Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial: 010D0C9F43285847FB1A330EE4537A956E5A1250
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 5645
IP address blocks: 198.84.128.0/17 maxlen: 17
198.84.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:33:0e:e4:53:7a:95:6e:5a:12:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=50c4f8ae-b07b-4374-87b4-790516505202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:e4:ba:88:9d:d3:f0:e0:c8:92:f9:cf:9e:
a6:d3:ae:92:9c:1d:dd:ed:6e:64:c8:92:8a:9e:c2:
ab:48:b5:d4:d8:9a:74:b0:28:fe:24:75:d5:1f:aa:
5d:12:8e:31:33:4b:58:59:30:ca:80:8a:2b:6d:a0:
7b:c3:a6:4a:da:2a:5c:ff:46:94:08:ec:6f:e8:6b:
37:bd:18:ac:0a:80:76:f5:37:a1:72:04:b8:b8:84:
36:ff:89:40:b4:06:22:ab:f7:de:4d:6c:81:c1:f7:
05:7d:06:ee:1d:77:e3:e3:00:0e:23:0a:92:ee:46:
77:30:b1:82:d3:e8:7f:1d:71:2c:10:38:c6:81:e8:
49:49:56:bb:3d:3e:53:4f:37:ce:da:3c:ac:2e:6a:
ea:cf:86:7f:4c:48:45:46:d0:64:7e:58:99:d0:32:
48:b8:92:90:69:a5:40:f6:77:13:5c:12:5e:b3:63:
bf:64:13:6e:f3:8b:32:34:df:8d:e0:a3:37:5c:57:
e5:77:8b:2a:e0:09:4d:aa:88:8b:02:e8:44:e6:5d:
ee:1a:72:cd:cf:59:70:1b:65:10:4c:1c:67:c3:bb:
09:1f:6a:a6:a0:a7:d0:9a:2b:52:f2:e2:22:85:22:
44:ad:d9:86:d6:50:3d:15:46:7b:d2:64:bc:51:c2:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:81:BD:7F:69:EB:F2:DF:BC:C4:EE:8C:26:D8:E4:22:29:76:AA:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
X509v3 Authority Key Identifier:
keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.84.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:27:a9:14:ba:24:20:2b:df:dd:f2:23:c8:89:e7:a5:18:38:
5a:7f:ac:a3:d6:8d:fb:10:75:f7:79:90:7c:94:3f:77:f9:e4:
57:86:4a:d1:f8:74:cf:81:2d:e0:78:35:e2:53:78:5c:41:a0:
5c:68:e1:d6:6b:76:d7:26:2c:61:55:65:8c:17:21:69:74:fa:
9b:4d:f4:7b:ce:2e:9d:2e:2e:6d:00:e7:42:2c:5c:65:c6:59:
17:b9:f4:1d:98:66:35:45:ac:f0:10:89:61:a6:6f:d4:11:fd:
d5:f0:d6:69:69:32:6b:b2:19:0e:df:ad:bb:96:d6:d2:30:79:
eb:e1:e4:75:b8:b4:d9:d6:69:45:b0:5f:83:ce:6b:f5:bc:8c:
3f:12:0d:5e:5f:d3:da:d4:d6:04:2d:c6:f5:21:b3:16:73:7e:
54:d1:ac:c2:9b:67:d9:04:5a:6c:36:a9:05:3a:0a:28:7b:0b:
16:87:2b:d8:4b:84:6d:c5:a7:8e:40:ec:ca:6d:b5:80:d7:1c:
07:66:78:64:0d:29:ac:56:a3:f6:15:61:99:67:7f:7b:9b:4a:
b6:c2:fe:0a:17:af:3a:e3:54:22:49:e3:b7:fb:2b:7b:b8:49:
08:b0:68:4b:1a:f6:c6:e2:7f:2a:f6:0b:36:be:e3:26:e5:50:
4d:f7:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:47:19 2025 by rpki-client