Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/5920a85d-f3d3-380a-b369-162ca959096d.roa
File: 5920a85d-f3d3-380a-b369-162ca959096d.roa (raw, json)
Hash identifier: ygSIe68iuM9PmU3g6pCuwmdBqpzlY73r/Ml/6Su5IR4=
Subject key identifier: B9:0D:05:D0:A3:2D:0E:48:C5:EA:09:23:B5:A1:45:16:83:1C:29:9E
Certificate issuer: /CN=4af28314-8fe0-47ff-83fe-2ca111b759a7
Certificate serial: 010D0C9F43285848854B44F54060A620CC133CC0
Authority key identifier: 03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/5920a85d-f3d3-380a-b369-162ca959096d.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 16509
IP address blocks: 198.160.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:44:f5:40:60:a6:20:cc:13:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4af28314-8fe0-47ff-83fe-2ca111b759a7
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=cdc2ef4d-761a-4c03-9fd3-d223ef9d3678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:06:9e:f7:d8:85:78:96:cc:79:9e:09:cd:43:
17:3f:84:af:c1:88:0c:49:ef:f7:3e:2f:48:1c:99:
b5:b0:20:67:88:34:c9:e3:2d:99:b1:f8:99:74:79:
08:18:fe:89:77:7a:df:70:9a:63:30:52:d1:69:db:
61:25:d6:d4:7e:9d:3c:55:00:29:f4:6e:1f:80:e4:
5f:4d:05:c6:a4:03:c0:54:f3:de:8f:bb:42:67:d2:
45:d6:42:ce:3e:6a:95:e1:f1:4a:fe:38:5a:9e:b0:
37:3c:cd:fc:4b:ec:7a:64:81:14:1b:97:d1:f7:31:
fb:42:7a:4a:ef:42:b2:0a:6f:4e:38:0f:2c:cd:1c:
6b:24:de:87:07:25:21:9e:b9:87:ee:6a:af:bc:db:
6f:98:22:c8:df:61:c8:ef:2b:00:71:55:0a:3e:b4:
cd:84:b3:17:8c:57:5c:a5:69:57:f6:68:bb:d3:b4:
6d:8d:bd:f0:bc:b9:48:03:8a:a9:01:c6:62:66:d1:
7f:b0:3b:78:d2:43:70:e6:63:52:42:61:a1:1c:21:
ac:17:79:19:d4:b9:0e:a1:ba:d3:99:be:7a:6d:b6:
5a:80:3e:0b:c6:7f:09:a3:73:8f:aa:f7:0c:10:5b:
a2:6b:3f:a5:99:78:ac:30:4c:4d:9a:e7:61:1c:04:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0D:05:D0:A3:2D:0E:48:C5:EA:09:23:B5:A1:45:16:83:1C:29:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/5920a85d-f3d3-380a-b369-162ca959096d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl
X509v3 Authority Key Identifier:
keyid:03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.160.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:a1:95:0a:78:fe:6f:77:5e:6f:a7:f4:f1:5a:e4:96:f0:ce:
f4:80:d7:1d:6a:de:ae:15:e8:43:a2:8e:73:74:94:6e:39:5c:
d2:85:2c:ce:33:18:24:06:98:ef:5d:da:88:39:3f:8c:66:74:
08:0a:fb:f3:6a:34:51:98:bc:21:f9:76:96:79:a4:55:10:fd:
87:81:d5:c6:55:63:21:96:6f:72:d9:42:79:92:39:10:97:69:
04:02:02:7b:e5:33:5d:75:22:a4:af:68:52:7d:17:ea:52:9b:
2a:79:f3:db:7f:54:43:b8:df:2b:bd:01:f5:09:21:9c:e7:83:
c4:02:ff:99:26:51:93:f5:70:ca:9b:0c:7d:f9:c8:92:e2:17:
46:c7:7d:d8:e6:c2:1a:9e:e7:10:69:15:94:6b:9f:92:ad:ed:
69:97:78:05:ae:2e:17:2c:e2:78:0d:e1:28:6b:21:c7:a6:87:
a8:19:e6:ab:de:f0:14:a1:6c:10:a3:45:4e:fc:5f:5d:0c:66:
cb:89:27:0d:78:fd:56:78:79:6a:83:21:fe:ac:a9:59:7b:b0:
1e:4f:18:3e:2d:d4:68:e2:9b:b5:f8:69:4b:2d:5c:da:b1:22:
c0:9c:7f:a6:0d:f5:87:b3:55:34:1e:41:2f:87:df:0c:74:8f:
52:6b:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:51 2025 by rpki-client