Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa
File: 85518f83-6d82-3dbd-ad23-fd6459007b47.roa (raw, json)
Hash identifier: XifPkW34t0JvkngJQn1pkYaBGiP46cMa3X16RQW0bHA=
Subject key identifier: D4:D8:6E:A7:7C:2C:43:3F:12:93:4D:BF:31:87:09:E7:75:5E:90:14
Certificate issuer: /CN=c42cfaea-6b46-494e-95ea-944662b8624b
Certificate serial: 010D0C9F432858488815E6A37D0572E3FC7D3480
Authority key identifier: 3F:AF:58:9A:D1:8F:65:47:CD:5A:B7:57:C6:B6:EA:CD:2D:AB:6A:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 198.232.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e6:a3:7d:05:72:e3:fc:7d:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42cfaea-6b46-494e-95ea-944662b8624b
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=57bde3cf-6b67-4715-9996-e29d57684e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:32:36:bc:3d:1e:df:5a:b7:c4:25:dc:b0:
86:28:2b:fe:39:0e:7e:9f:c3:18:65:57:55:83:1e:
dc:94:8a:da:c3:64:79:ff:2d:71:7d:4c:7e:10:8d:
74:6a:5e:75:bd:b0:61:2e:6c:46:ae:20:27:b6:0b:
43:ab:48:1b:7c:26:aa:97:76:9a:f5:0a:37:c2:06:
44:a8:77:cf:da:d0:9e:cd:54:89:90:85:a4:db:9b:
dc:2d:12:c4:e2:c7:38:f0:00:f8:da:f8:95:31:5a:
20:ec:82:9f:22:b4:9b:fa:d3:a2:1f:e2:ff:65:40:
ec:f8:b6:b4:44:9f:56:0f:f7:2a:3c:8b:15:8f:ad:
e4:39:b9:e5:97:a0:e6:15:dc:c4:5a:0f:77:c4:b6:
52:7f:ac:dc:75:16:ae:c3:6e:9e:3c:2d:14:72:06:
92:e9:64:37:27:cd:c1:77:a2:32:fa:67:f3:4b:c2:
21:62:de:b2:e3:b4:bd:b3:25:69:07:ca:dd:37:27:
4d:a8:64:a7:4d:d8:9f:76:ea:89:d7:e8:af:30:d2:
55:79:74:8b:a4:8f:da:0e:b2:a4:4c:a0:37:5d:31:
af:31:69:9a:06:91:2f:f4:a8:1f:08:b0:8b:86:1e:
34:70:d6:8d:c7:19:ea:21:36:29:c3:c9:85:9d:0d:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:6E:A7:7C:2C:43:3F:12:93:4D:BF:31:87:09:E7:75:5E:90:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.crl
X509v3 Authority Key Identifier:
keyid:3F:AF:58:9A:D1:8F:65:47:CD:5A:B7:57:C6:B6:EA:CD:2D:AB:6A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.232.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:61:bd:89:69:ed:ba:32:04:33:1f:ff:ad:a6:ff:1d:b9:21:
d1:22:f0:39:9d:3d:2a:c5:8a:c8:1a:b5:2a:86:31:60:5d:48:
57:b9:b9:92:fb:fc:16:26:01:c7:ec:a9:67:6d:7e:d0:3a:17:
50:02:3a:98:92:9e:86:b4:e1:16:e9:42:c9:d3:bf:f1:2a:c7:
b1:48:c8:3a:5a:4a:0c:e6:55:31:88:80:6e:82:10:4c:0b:4c:
6f:b8:f2:e1:68:da:b3:5e:06:31:15:6f:f8:66:82:cc:8b:60:
89:3d:1e:18:a1:a2:2d:e8:1e:3f:8a:02:4d:da:34:44:39:0c:
ff:f5:a9:ae:d2:35:ea:59:af:e9:0f:1f:cc:c3:04:0c:27:2a:
16:a1:0c:2f:0f:41:42:2d:e0:20:c3:3a:14:fc:d4:51:d9:79:
f6:2e:de:78:e6:97:32:83:2a:63:a1:f8:69:53:2d:7d:e4:ee:
5c:9b:35:14:e1:58:94:c1:df:d6:5f:47:9b:7e:f1:16:bd:88:
c3:8e:e9:63:9d:9f:dd:1b:eb:e6:e4:31:04:34:9b:55:bc:87:
2d:19:67:4f:52:09:8c:42:a7:55:55:92:50:be:1f:d1:b3:57:
cd:3f:83:22:32:a8:1b:80:36:cd:e7:44:a8:bd:32:11:22:02:
a6:ec:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:49 2025 by rpki-client