Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa
File: 40ca3da7-d905-3def-9f19-2e32b7805f82.roa (raw, json)
Hash identifier: 587IPpEEGva4N42CxtlIPpcVD2CR1lP494DDYIw7+dw=
Subject key identifier: F6:65:3E:C7:43:18:22:FE:94:50:68:26:9A:E8:58:53:AC:9D:DC:83
Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
Certificate serial: 010D0C9F43285847F17AB8045643FE80E9477EC0
Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa
Signing time: Wed 20 Nov 2024 15:17:02 +0000
ROA not before: Wed 20 Nov 2024 15:17:02 +0000
ROA not after: Tue 18 Feb 2025 15:17:02 +0000
asID: 19782
IP address blocks: 198.51.243.0/24 maxlen: 24
198.51.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:7a:b8:04:56:43:fe:80:e9:47:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
Validity
Not Before: Nov 20 15:17:02 2024 GMT
Not After : Feb 18 15:17:02 2025 GMT
Subject: CN=cd55f5d8-e6a6-4ada-9332-a03b60488249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:33:aa:d6:90:64:fc:e5:b2:93:08:4b:c7:
69:4e:7d:d4:94:23:78:f3:bd:b7:99:b6:b8:46:30:
2d:a5:2c:37:76:85:3b:88:5b:97:74:89:24:f3:29:
0a:06:f6:60:ed:be:4a:c1:37:9b:66:cc:77:98:72:
1f:a3:85:92:3a:bc:a9:c1:55:40:0f:c3:97:02:cb:
c5:54:74:24:6f:58:e2:97:1b:27:29:20:ed:b9:4c:
25:1d:9b:ef:6d:59:36:80:e7:89:89:36:a0:49:97:
12:e0:9a:1b:e0:7a:ec:9e:1b:a6:14:87:e8:10:0c:
28:77:e0:79:0a:53:13:9f:9e:9f:ad:4b:13:df:4d:
04:53:9f:cc:5e:52:38:df:0e:c3:d7:0a:60:93:db:
19:9f:a6:3a:d6:f1:d6:36:ea:e6:16:74:a0:49:29:
f4:23:b5:d3:fa:3b:63:00:6c:10:77:ab:c0:d7:e6:
9d:5c:85:04:e6:fe:bb:89:41:b9:4f:63:05:28:d7:
69:ae:68:67:19:c5:b9:3f:05:25:dc:cf:db:98:0d:
3a:63:a8:30:93:de:83:ba:ff:65:d2:6f:14:b5:36:
58:ba:3d:da:34:33:61:e8:a7:2c:bf:e8:ce:80:0c:
72:85:bb:81:64:ac:84:27:e2:a6:5f:5b:d0:c2:2f:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:3E:C7:43:18:22:FE:94:50:68:26:9A:E8:58:53:AC:9D:DC:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl
X509v3 Authority Key Identifier:
keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
sbgp-ipAddrBlock: critical
IPv4:
198.51.243.0-198.51.244.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:69:c7:38:03:cc:de:95:d3:73:d6:f4:52:1b:92:28:87:ed:
03:41:4f:46:6a:92:b9:a6:2a:57:ea:55:55:f9:1a:ce:d6:94:
a0:7c:f9:99:fd:8c:23:d2:ef:08:78:56:81:42:cc:d5:85:d9:
fc:55:cf:e2:58:dd:bc:62:0f:a8:ff:59:5d:e4:f3:7c:2c:35:
b3:75:6c:0f:08:a2:1b:84:4a:de:a8:df:21:14:30:21:77:00:
64:3e:93:2e:b6:11:bf:0f:8c:5c:50:cd:13:12:a0:c0:79:54:
4c:c5:25:b7:35:a3:1f:c7:11:f9:00:12:67:fc:e6:c6:5c:2d:
89:c8:04:e6:90:01:8f:45:ea:15:80:f3:38:19:7b:37:d7:86:
0b:79:bf:2a:c8:04:e9:c6:ca:05:49:6d:5b:e1:3d:da:b6:ac:
bf:ad:b6:c5:1f:e7:e5:bb:07:1b:27:f3:9a:13:d2:82:cb:f9:
01:78:ea:83:70:48:2d:c5:49:a5:ed:fd:84:82:3d:f7:da:ed:
6b:f3:83:e8:1a:02:c3:b7:a1:41:e4:8b:a7:b8:d7:80:a9:24:
c3:8d:45:af:61:10:f4:60:19:28:56:f7:61:30:90:9d:82:5d:
73:89:ff:38:d3:0f:18:d5:88:8b:10:be:ac:50:58:93:25:1f:
f4:c9:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:49 2025 by rpki-client