Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/4d18e435-85a1-3ccb-9ec1-b0159c9b66c8.roa
File: 4d18e435-85a1-3ccb-9ec1-b0159c9b66c8.roa (raw, json)
Hash identifier: y2c/AyCRjja9W/B9aWmBbXp2qVb79A9TO7xRjm2dWl0=
Subject key identifier: FE:EA:B3:57:8F:2F:C1:9B:65:F8:D0:42:4B:B7:37:06:A8:DF:43:0E
Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial: 010D0C9F432858480BDA6589D1FBB08BEC45B200
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/4d18e435-85a1-3ccb-9ec1-b0159c9b66c8.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 22147
IP address blocks: 198.160.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:65:89:d1:fb:b0:8b:ec:45:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=9b9970b9-515a-410c-b0bf-d52fb9993f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:ed:94:34:a0:0a:2e:2b:02:8a:7f:b5:a7:
dd:2c:32:29:47:79:ec:4b:e8:b6:14:ce:64:bf:b0:
4a:36:3a:58:53:47:78:a2:3a:dd:1d:43:a7:c0:1d:
ee:36:14:6d:87:97:de:ad:e1:67:47:90:45:a1:2b:
c1:97:e3:65:48:63:57:4a:bb:00:4a:e6:1b:7f:76:
70:78:31:9c:21:6e:5e:12:45:0e:d0:fb:1c:26:d9:
0e:5f:b1:45:62:96:99:fc:5b:d0:d5:1b:bf:6a:03:
61:32:97:d7:dc:20:8b:14:cd:c8:8b:58:8c:cb:c5:
c2:bf:e8:67:47:6c:9b:9f:12:83:7b:29:f4:52:c3:
d0:a7:ed:bb:ea:94:01:0b:29:73:2c:1e:dc:19:83:
b1:ec:7d:8e:e4:7e:07:7d:5f:24:85:0b:44:60:bd:
85:a3:b0:29:7c:9c:4e:85:8c:19:a4:a3:b2:2e:33:
e0:47:60:39:f3:30:08:61:f5:63:0e:4b:f6:f6:e1:
7a:0d:ac:2a:d7:aa:7c:b0:6e:4b:ec:62:50:6e:f0:
83:c0:88:e0:07:20:98:1b:be:b1:32:5c:9f:e4:e1:
3d:cd:16:35:d6:48:cc:f8:3c:60:6c:9e:04:8f:ed:
06:0c:31:fa:cd:02:ce:40:00:4e:56:79:54:0f:db:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EA:B3:57:8F:2F:C1:9B:65:F8:D0:42:4B:B7:37:06:A8:DF:43:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/4d18e435-85a1-3ccb-9ec1-b0159c9b66c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
X509v3 Authority Key Identifier:
keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
sbgp-ipAddrBlock: critical
IPv4:
198.160.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:d2:9b:ef:4c:d1:94:aa:90:e2:c9:1a:e3:4c:d7:24:b0:99:
8c:af:1b:ae:98:75:d2:a7:51:3e:5e:2a:bb:61:1d:4a:cd:c6:
40:18:f9:0e:a9:5d:f4:a4:38:89:ac:cc:c0:3b:af:f1:2f:0b:
25:ec:b9:0a:a7:4a:24:ae:f3:dd:d3:21:76:6d:2a:4a:22:32:
e5:6a:be:26:7a:e4:8e:aa:c3:36:34:f5:50:fd:d5:5b:7f:5a:
77:0c:5e:52:57:e3:f4:26:9e:7e:af:88:96:95:11:63:d0:57:
de:7e:68:15:50:b0:91:0d:30:ac:d7:fc:d1:9d:55:16:56:7c:
cf:c8:ec:36:cd:83:33:9b:3f:8a:93:83:ab:73:cd:51:af:ed:
27:3d:ea:11:f2:9f:fd:ed:e0:fa:f3:4a:e6:f6:5e:55:47:3d:
18:cc:99:a0:75:73:92:17:0c:88:e8:81:eb:c1:c3:10:b9:14:
db:a7:c4:81:e6:72:0d:53:36:08:6e:67:f8:50:35:2a:9a:fa:
4f:fc:bf:e7:26:57:06:fb:f7:bc:0a:71:cf:e3:a1:22:8a:d5:
84:7c:fe:56:c3:78:d3:a5:b3:96:e1:3f:4e:72:85:f3:a8:5d:
5c:48:80:80:22:9b:00:97:2b:99:2f:3d:cf:51:a6:1b:53:44:
02:1a:b6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:26 2025 by rpki-client